<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3411</id>
    <title>lttng-ust bug fix and enhancement update</title>
    <issued date="2019-11-05 17:42:56"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>Updated lttng-ust packages that fix several bugs and add various enhancements are now available.</summary>
    <description>This update fixes two issues in lttng-ust and subpackages.

There was a bad shebang in the /usr/bin/lttng-gen-tp utility that prevented users from executing it. This issue has been fixed.

lttng-ust was only available for x86_64 architectures. lttng-ust is now available for all architectures supported on AlmaLinux.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3411.html" id="ALBA-2019-3411" type="self" title="ALBA-2019-3411"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="lttng-ust-devel" version="2.8.1" release="11.el8" epoch="0" arch="aarch64" src="lttng-ust-2.8.1-11.el8.src.rpm">
          <filename>lttng-ust-devel-2.8.1-11.el8.aarch64.rpm</filename>
          <sum type="sha256">20b17b564aa13cb9a86f37c18f023b6b2ebffecc41aec20b797fa3928561c42c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3449</id>
    <title>new packages: gcc-toolset-9-dyninst</title>
    <issued date="2019-11-05 17:47:15"/>
    <updated date="2019-11-05 17:47:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>None</severity>
    <summary>New gcc-toolset-9-dyninst packages are now available for AlmaLinux</summary>
    <description>GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection.

This enhancement update adds the gcc-toolset-9-dyninst packages to AlmaLinux Eneterprise Linux 8.

For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documented in the GCC Toolset 9 chapter. 

For detailed changes in this release, see the AlmaLinux Release Notes.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3449.html" id="ALBA-2019-3449" type="self" title="ALBA-2019-3449"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gcc-toolset-9-dyninst-devel" version="10.1.0" release="1.el8" epoch="0" arch="aarch64" src="gcc-toolset-9-dyninst-10.1.0-1.el8.src.rpm">
          <filename>gcc-toolset-9-dyninst-devel-10.1.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">38c9a278f5882a6a0d19637fa3f3297fc8262d507732c8386982969be7ec6fbf</sum>
        </package>
        <package name="gcc-toolset-9-dyninst-static" version="10.1.0" release="1.el8" epoch="0" arch="aarch64" src="gcc-toolset-9-dyninst-10.1.0-1.el8.src.rpm">
          <filename>gcc-toolset-9-dyninst-static-10.1.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">668efc4b7a4fda6fad09564fdaa165485b7435f39f1162ccdbf90bff62786721</sum>
        </package>
        <package name="gcc-toolset-9-dyninst-testsuite" version="10.1.0" release="1.el8" epoch="0" arch="aarch64" src="gcc-toolset-9-dyninst-10.1.0-1.el8.src.rpm">
          <filename>gcc-toolset-9-dyninst-testsuite-10.1.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">9e01c04ef7a252a21204208f5892d4d5cddf52aa1b3adedb834c5e83a55bc933</sum>
        </package>
        <package name="gcc-toolset-9-dyninst-doc" version="10.1.0" release="1.el8" epoch="0" arch="aarch64" src="gcc-toolset-9-dyninst-10.1.0-1.el8.src.rpm">
          <filename>gcc-toolset-9-dyninst-doc-10.1.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b7480079229ca865972db90c9ff57de96bf7891a90060f1a04cc3c6e26a4d2b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3462</id>
    <title>libcdio bug fix and enhancement update</title>
    <issued date="2019-11-05 17:48:20"/>
    <updated date="2019-11-05 17:48:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libcdio is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3462.html" id="ALBA-2019-3462" type="self" title="ALBA-2019-3462"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libcdio-devel" version="2.0.0" release="3.el8" epoch="0" arch="aarch64" src="libcdio-2.0.0-3.el8.src.rpm">
          <filename>libcdio-devel-2.0.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">0d783ba0909c3628d3276b7b7e3b4e0cae15de8ef6981c3adbbf9522518542c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3490</id>
    <title>ldns bug fix and enhancement update</title>
    <issued date="2019-11-05 17:51:41"/>
    <updated date="2019-11-05 17:51:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ldns is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3490.html" id="ALBA-2019-3490" type="self" title="ALBA-2019-3490"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ldns-devel" version="1.7.0" release="21.el8" epoch="0" arch="aarch64" src="ldns-1.7.0-21.el8.src.rpm">
          <filename>ldns-devel-1.7.0-21.el8.aarch64.rpm</filename>
          <sum type="sha256">cfcffd45ed4e526331faeceea7d1e6585f5597ce3c8c7b23c62a5aeeca857817</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3558</id>
    <title>libzfcphbaapi bug fix and enhancement update</title>
    <issued date="2019-11-05 18:00:38"/>
    <updated date="2019-11-05 18:00:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for libzfcphbaapi is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3558.html" id="ALBA-2019-3558" type="self" title="ALBA-2019-3558"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libhbaapi-devel" version="2.2.9" release="13.el8" epoch="0" arch="aarch64" src="libhbaapi-2.2.9-13.el8.src.rpm">
          <filename>libhbaapi-devel-2.2.9-13.el8.aarch64.rpm</filename>
          <sum type="sha256">cc75a1961f42006db67621314dfb6fdda9ee1114a310d145bc8934fcb4d8a6b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3593</id>
    <title>ipset bug fix and enhancement update</title>
    <issued date="2019-11-05 18:05:13"/>
    <updated date="2019-11-05 18:05:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ipset is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3593.html" id="ALBA-2019-3593" type="self" title="ALBA-2019-3593"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ipset-devel" version="7.1" release="1.el8" epoch="0" arch="aarch64" src="ipset-7.1-1.el8.src.rpm">
          <filename>ipset-devel-7.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e469c3d4cdd26d37e606463b0699475ff6b272636907874790b78d06f338a9b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3680</id>
    <title>doxygen bug fix and enhancement update</title>
    <issued date="2019-11-05 18:14:51"/>
    <updated date="2019-11-05 18:14:45"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for doxygen is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3680.html" id="ALBA-2019-3680" type="self" title="ALBA-2019-3680"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="doxygen-doxywizard" version="1.8.14" release="12.el8" epoch="1" arch="aarch64" src="doxygen-1.8.14-12.el8.src.rpm">
          <filename>doxygen-doxywizard-1.8.14-12.el8.aarch64.rpm</filename>
          <sum type="sha256">37805fcc7417ddff2d67e19fbec9798136b6dcaa3317fdb64cb16a83c3aafcbc</sum>
        </package>
        <package name="doxygen-latex" version="1.8.14" release="12.el8" epoch="1" arch="aarch64" src="doxygen-1.8.14-12.el8.src.rpm">
          <filename>doxygen-latex-1.8.14-12.el8.aarch64.rpm</filename>
          <sum type="sha256">756bcef764e7055c74cbd0634844a28dddeaca8af010b29f358401c0df07af8b</sum>
        </package>
        <package name="doxygen" version="1.8.14" release="12.el8" epoch="1" arch="aarch64" src="doxygen-1.8.14-12.el8.src.rpm">
          <filename>doxygen-1.8.14-12.el8.aarch64.rpm</filename>
          <sum type="sha256">83a32e4d6dc5609e425ce2dbd7f3c856a2628894348a101885c016fd1cc8d080</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2019:3682</id>
    <title>gnu-efi bug fix and enhancement update</title>
    <issued date="2019-11-05 18:15:12"/>
    <updated date="2019-11-05 18:14:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for gnu-efi is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2019-3682.html" id="ALBA-2019-3682" type="self" title="ALBA-2019-3682"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gnu-efi-devel" version="3.0.8" release="4.el8" epoch="1" arch="aarch64" src="gnu-efi-3.0.8-4.el8.src.rpm">
          <filename>gnu-efi-devel-3.0.8-4.el8.aarch64.rpm</filename>
          <sum type="sha256">90fb85d1d348c554f7056a545c54b4541974e72821cb74762c741d5a4dedbcfc</sum>
        </package>
        <package name="gnu-efi" version="3.0.8" release="4.el8" epoch="1" arch="aarch64" src="gnu-efi-3.0.8-4.el8.src.rpm">
          <filename>gnu-efi-3.0.8-4.el8.aarch64.rpm</filename>
          <sum type="sha256">af31b31e90017eac228cd491ab7a437d5a6d4aa94e133ab88facd047a252a971</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2020:1622</id>
    <title>python-greenlet bug fix and enhancement update</title>
    <issued date="2020-04-28 08:57:36"/>
    <updated date="2020-04-28 08:57:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for python-greenlet is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-1622.html" id="ALBA-2020-1622" type="self" title="ALBA-2020-1622"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="python3-greenlet-devel" version="0.4.13" release="4.el8" epoch="0" arch="aarch64" src="python-greenlet-0.4.13-4.el8.src.rpm">
          <filename>python3-greenlet-devel-0.4.13-4.el8.aarch64.rpm</filename>
          <sum type="sha256">0c0a3ade701c2389614f72e7fc4d34418e2a7cfdaf8b3b53c1f6fec79673b01e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2020:1633</id>
    <title>xorg X11 server and driver bug fix and enhancement update</title>
    <issued date="2020-04-28 08:58:47"/>
    <updated date="2020-04-28 08:58:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for xorg X11 server and driver is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-1633.html" id="ALBA-2020-1633" type="self" title="ALBA-2020-1633"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="xorg-x11-drv-wacom-devel" version="0.38.0" release="1.el8" epoch="0" arch="aarch64" src="xorg-x11-drv-wacom-0.38.0-1.el8.src.rpm">
          <filename>xorg-x11-drv-wacom-devel-0.38.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">03bba391fc94c236ee26e84b981a8be57c00ef85217896d7131b5599cd62ced5</sum>
        </package>
        <package name="xorg-x11-drv-libinput-devel" version="0.29.0" release="1.el8" epoch="0" arch="aarch64" src="xorg-x11-drv-libinput-0.29.0-1.el8.src.rpm">
          <filename>xorg-x11-drv-libinput-devel-0.29.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e2cf76c88767c0b365bed9f33639fa87bc57531c964b5dd5df1b864f31ced8b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2020:1743</id>
    <title>librevenge bug fix and enhancement update</title>
    <issued date="2020-04-28 09:11:08"/>
    <updated date="2020-04-28 09:10:59"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for librevenge is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-1743.html" id="ALBA-2020-1743" type="self" title="ALBA-2020-1743"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="librevenge-devel" version="0.0.4" release="12.el8" epoch="0" arch="aarch64" src="librevenge-0.0.4-12.el8.src.rpm">
          <filename>librevenge-devel-0.0.4-12.el8.aarch64.rpm</filename>
          <sum type="sha256">98c6f65240867539fee6b01292e1ff1689c7497eea1867a2956210a825d5e1bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2020:1898</id>
    <title>sg3_utils bug fix and enhancement update</title>
    <issued date="2020-04-28 09:28:21"/>
    <updated date="2020-04-28 09:28:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for sg3_utils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-1898.html" id="ALBA-2020-1898" type="self" title="ALBA-2020-1898"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="sg3_utils-devel" version="1.44" release="5.el8" epoch="0" arch="aarch64" src="sg3_utils-1.44-5.el8.src.rpm">
          <filename>sg3_utils-devel-1.44-5.el8.aarch64.rpm</filename>
          <sum type="sha256">df0643a81a636e5fecb8886f69696b6d4c5ccbec38475ac33a7428d2f009aa3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2020:1919</id>
    <title>ppp bug fix and enhancement update</title>
    <issued date="2020-04-28 09:30:53"/>
    <updated date="2020-04-28 09:30:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>None</severity>
    <summary>An update for ppp is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-1919.html" id="ALBA-2020-1919" type="self" title="ALBA-2020-1919"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ppp-devel" version="2.4.7" release="26.el8_1" epoch="0" arch="aarch64" src="ppp-2.4.7-26.el8_1.src.rpm">
          <filename>ppp-devel-2.4.7-26.el8_1.aarch64.rpm</filename>
          <sum type="sha256">5989d0916a744ac82fd78b89acf3eea6f982d6ffe96d1c4003394fc760d5c816</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2020:1922</id>
    <title>uglify-js bug fix and enhancement update</title>
    <issued date="2020-04-28 09:31:22"/>
    <updated date="2020-04-28 09:31:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for uglify-js is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-1922.html" id="ALBA-2020-1922" type="self" title="ALBA-2020-1922"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="js-uglify" version="2.8.29" release="4.el8" epoch="0" arch="noarch" src="uglify-js-2.8.29-4.el8.src.rpm">
          <filename>js-uglify-2.8.29-4.el8.noarch.rpm</filename>
          <sum type="sha256">6e0d70095280dc8b9e8e63af2e531b80f4a1b062d8aa98ca5611464ca7b18c34</sum>
        </package>
        <package name="uglify-js" version="2.8.29" release="4.el8" epoch="0" arch="noarch" src="uglify-js-2.8.29-4.el8.src.rpm">
          <filename>uglify-js-2.8.29-4.el8.noarch.rpm</filename>
          <sum type="sha256">df87f3ba12e381c5e5db06bc1be84c9e5c77c1889649975e4b0a45a6d90e0781</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4499</id>
    <title>NetworkManager bug fix and enhancement update</title>
    <issued date="2020-11-03 12:10:10"/>
    <updated date="2020-11-03 19:35:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for NetworkManager is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4499.html" id="ALBA-2020-4499" type="self" title="ALBA-2020-4499"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="jimtcl-devel" version="0.77" release="6.el8" epoch="0" arch="aarch64" src="jimtcl-0.77-6.el8.src.rpm">
          <filename>jimtcl-devel-0.77-6.el8.aarch64.rpm</filename>
          <sum type="sha256">891e2b12d2fe5c2612c5555b98f4c74f6e577846694574187b9a3789f850cf5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4600</id>
    <title>snappy bug fix and enhancement update</title>
    <issued date="2020-11-03 12:19:16"/>
    <updated date="2020-11-03 19:42:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for snappy is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4600.html" id="ALBA-2020-4600" type="self" title="ALBA-2020-4600"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="snappy-devel" version="1.1.8" release="3.el8" epoch="0" arch="aarch64" src="snappy-1.1.8-3.el8.src.rpm">
          <filename>snappy-devel-1.1.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">51efcb5cf4f94ee20b51cc21cda9fc3f57ccf1a6aba829d8473fd3e1d6b5524f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4658</id>
    <title>munge bug fix and enhancement update</title>
    <issued date="2020-11-03 12:24:30"/>
    <updated date="2020-11-03 19:47:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for munge is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4658.html" id="ALBA-2020-4658" type="self" title="ALBA-2020-4658"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="munge-devel" version="0.5.13" release="2.el8" epoch="0" arch="aarch64" src="munge-0.5.13-2.el8.src.rpm">
          <filename>munge-devel-0.5.13-2.el8.aarch64.rpm</filename>
          <sum type="sha256">04099902f1953390ae59712c7b74b088588155c374f624fdb0ad6b3e1c4667da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4678</id>
    <title>tog-pegasus bug fix and enhancement update</title>
    <issued date="2020-11-03 12:26:13"/>
    <updated date="2020-11-03 19:49:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for tog-pegasus is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4678.html" id="ALBA-2020-4678" type="self" title="ALBA-2020-4678"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="tog-pegasus-devel" version="2.14.1" release="46.el8" epoch="2" arch="aarch64" src="tog-pegasus-2.14.1-46.el8.src.rpm">
          <filename>tog-pegasus-devel-2.14.1-46.el8.aarch64.rpm</filename>
          <sum type="sha256">a7e476167207b598cfca2cd01414c6c7fc86ed21f1016805f70b4df9ce010766</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4733</id>
    <title>protobuf bug fix and enhancement update</title>
    <issued date="2020-11-03 12:31:32"/>
    <updated date="2020-11-03 19:53:38"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for protobuf is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4733.html" id="ALBA-2020-4733" type="self" title="ALBA-2020-4733"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="protobuf-lite-devel" version="3.5.0" release="13.el8" epoch="0" arch="aarch64" src="protobuf-3.5.0-13.el8.src.rpm">
          <filename>protobuf-lite-devel-3.5.0-13.el8.aarch64.rpm</filename>
          <sum type="sha256">6a2861f59d690068b76c8def4c25b3dec98aae010261d1ff099ab9cc0011d7b2</sum>
        </package>
        <package name="protobuf-devel" version="3.5.0" release="13.el8" epoch="0" arch="aarch64" src="protobuf-3.5.0-13.el8.src.rpm">
          <filename>protobuf-devel-3.5.0-13.el8.aarch64.rpm</filename>
          <sum type="sha256">9d78d75640c8ed81272921be0b6055d95d2ec534b377bd30f2b290c663a262b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4773</id>
    <title>libgit2 bug fix and enhancement update</title>
    <issued date="2020-11-03 12:34:55"/>
    <updated date="2020-11-03 19:56:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libgit2 is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4773.html" id="ALBA-2020-4773" type="self" title="ALBA-2020-4773"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libgit2-devel" version="0.26.8" release="2.el8" epoch="0" arch="aarch64" src="libgit2-0.26.8-2.el8.src.rpm">
          <filename>libgit2-devel-0.26.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">899fdd748e3fc64abe3231d6cc34d10f6d2074c5887bb50ec538b8168ef14799</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4832</id>
    <title>torque bug fix and enhancement update</title>
    <issued date="2020-11-03 12:39:38"/>
    <updated date="2020-11-03 20:01:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for torque is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4832.html" id="ALBA-2020-4832" type="self" title="ALBA-2020-4832"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="torque-devel" version="4.2.10" release="25.el8" epoch="0" arch="aarch64" src="torque-4.2.10-25.el8.src.rpm">
          <filename>torque-devel-4.2.10-25.el8.aarch64.rpm</filename>
          <sum type="sha256">dbac6577ef160f455fcc2edecaedcc7874e45c19ab314f372ec0eba4e3c95514</sum>
        </package>
        <package name="torque" version="4.2.10" release="25.el8" epoch="0" arch="aarch64" src="torque-4.2.10-25.el8.src.rpm">
          <filename>torque-4.2.10-25.el8.aarch64.rpm</filename>
          <sum type="sha256">df5449cf6e66d7a823340e9d3626e66b100867b550d4c1a5919f546ff92eff01</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2020:4834</id>
    <title>new packages: gcc-toolset-10-systemtap</title>
    <issued date="2020-11-03 12:39:45"/>
    <updated date="2020-11-03 20:01:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>None</severity>
    <summary>New gcc-toolset-10-systemtap packages are now available for AlmaLinux</summary>
    <description>GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection.

This enhancement update adds the gcc-toolset-10-systemtap packages to AlmaLinux Eneterprise Linux 8.

For instructions on usage, see Using GCC Toolset linked from the References section. Components and specifics of this version are documented in the GCC Toolset 10 chapter. 

For detailed changes in this release, see the AlmaLinux Release Notes.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2020-4834.html" id="ALBA-2020-4834" type="self" title="ALBA-2020-4834"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gcc-toolset-9-gcc-plugin-devel" version="9.2.1" release="2.3.el8" epoch="0" arch="aarch64" src="gcc-toolset-9-gcc-9.2.1-2.3.el8.src.rpm">
          <filename>gcc-toolset-9-gcc-plugin-devel-9.2.1-2.3.el8.aarch64.rpm</filename>
          <sum type="sha256">e50f48a5d7c9a5b2da75fc17ae41f30b3c2b74e48508b854d6639259f995ced5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1587</id>
    <title>librabbitmq bug fix and enhancement update</title>
    <issued date="2021-05-18 05:35:32"/>
    <updated date="2021-05-18 05:35:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for librabbitmq is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1587.html" id="ALBA-2021-1587" type="self" title="ALBA-2021-1587"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="librabbitmq-devel" version="0.9.0" release="3.el8" epoch="0" arch="aarch64" src="librabbitmq-0.9.0-3.el8.src.rpm">
          <filename>librabbitmq-devel-0.9.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">100ba47cdbec06db8539ea6e42b1811f6ee46fa45cda3e2bbd924134f1ff5fb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1605</id>
    <title>libpwquality bug fix and enhancement update</title>
    <issued date="2021-05-18 05:38:03"/>
    <updated date="2021-05-18 05:37:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libpwquality is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1605.html" id="ALBA-2021-1605" type="self" title="ALBA-2021-1605"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libpwquality-devel" version="1.4.4" release="3.el8" epoch="0" arch="aarch64" src="libpwquality-1.4.4-3.el8.src.rpm">
          <filename>libpwquality-devel-1.4.4-3.el8.aarch64.rpm</filename>
          <sum type="sha256">ac092ac413617ff9121989d1ed7a64c601c3f749f7def600dc8bc58a67cd1eab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1612</id>
    <title>avahi bug fix and enhancement update</title>
    <issued date="2021-05-18 05:39:21"/>
    <updated date="2021-05-18 05:39:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for avahi is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1612.html" id="ALBA-2021-1612" type="self" title="ALBA-2021-1612"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="avahi-ui" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-ui-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">35a28c777d6f554943b07cc1a94bdc06657af67eef58d90ea332ec68dc8d0fec</sum>
        </package>
        <package name="avahi-ui-devel" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-ui-devel-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">3cd45878b3dbe7ad1a4a236e6953844c158f6da8e68c18931380dfd9b5b2c37d</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-compat-libdns_sd-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">4af7c0a5bba6cb9ca7af3ed73f5ac023ccad3a1bf4f9863d324ceeda71960408</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-compat-howl-devel-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">74352dc325988a3cd2ca124d24d11a799797e746aa5bc08b4ccf5f7c1708eebd</sum>
        </package>
        <package name="avahi-gobject-devel" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-gobject-devel-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">b8fb20f83076ddbfc17c14dc169c51475027713e332b0517b063fa5de58e9548</sum>
        </package>
        <package name="avahi-compat-howl" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-compat-howl-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">ce0d76e45f7c2ad1dae241bc8a36af81f58b510f17be19712a2e624f3b4773a9</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">efbb46ec1da40425c11eb88a901c1aebc11cb164a3e2d4bfaa71dcdb59ee7696</sum>
        </package>
        <package name="avahi-devel" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-devel-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">f033d99fefa7db697417aa6ed20d2a0a334955a86d5610398d571eecc401ec5e</sum>
        </package>
        <package name="avahi-glib-devel" version="0.7" release="20.el8" epoch="0" arch="aarch64" src="avahi-0.7-20.el8.src.rpm">
          <filename>avahi-glib-devel-0.7-20.el8.aarch64.rpm</filename>
          <sum type="sha256">fef219f5575d5027726b9b832967395884690153e77e4b38111903434b1fadcc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1628</id>
    <title>tpm-tools bug fix and enhancement update</title>
    <issued date="2021-05-18 05:41:57"/>
    <updated date="2021-05-18 05:41:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for tpm-tools is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1628.html" id="ALBA-2021-1628" type="self" title="ALBA-2021-1628"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="tpm-tools-devel" version="1.3.9.2" release="1.el8" epoch="0" arch="aarch64" src="tpm-tools-1.3.9.2-1.el8.src.rpm">
          <filename>tpm-tools-devel-1.3.9.2-1.el8.aarch64.rpm</filename>
          <sum type="sha256">19d3fcf2a670854234d37c2ac8201a4cde54d8e80e2e71ae4b6c535893630ac5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1660</id>
    <title>tpm2-abrmd bug fix and enhancement update</title>
    <issued date="2021-05-18 05:46:24"/>
    <updated date="2021-05-18 05:46:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for tpm2-abrmd is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1660.html" id="ALBA-2021-1660" type="self" title="ALBA-2021-1660"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="tpm2-abrmd-devel" version="2.3.3" release="2.el8" epoch="0" arch="aarch64" src="tpm2-abrmd-2.3.3-2.el8.src.rpm">
          <filename>tpm2-abrmd-devel-2.3.3-2.el8.aarch64.rpm</filename>
          <sum type="sha256">383fc7dcd0b977cdad4bb2f0ae54da1a2379c108999b744aafd34bc2ba089837</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1689</id>
    <title>librepo bug fix and enhancement update</title>
    <issued date="2021-05-18 05:50:55"/>
    <updated date="2021-05-18 05:50:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for librepo is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1689.html" id="ALBA-2021-1689" type="self" title="ALBA-2021-1689"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="librhsm-devel" version="0.0.3" release="4.el8" epoch="0" arch="aarch64" src="librhsm-0.0.3-4.el8.src.rpm">
          <filename>librhsm-devel-0.0.3-4.el8.aarch64.rpm</filename>
          <sum type="sha256">ff1ef8a87db9df82d4989a7d75181fe5648a8b245adbaae21443b2d223472ce1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1693</id>
    <title>augeas bug fix and enhancement update</title>
    <issued date="2021-05-18 05:51:07"/>
    <updated date="2021-05-18 05:51:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for augeas is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1693.html" id="ALBA-2021-1693" type="self" title="ALBA-2021-1693"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="augeas-devel" version="1.12.0" release="6.el8" epoch="0" arch="aarch64" src="augeas-1.12.0-6.el8.src.rpm">
          <filename>augeas-devel-1.12.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">470b30e8322998d48da96807a90e3a68221dfabe4b2e871b915297fca912794e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1731</id>
    <title>userspace-rcu bug fix and enhancement update</title>
    <issued date="2021-05-18 05:56:21"/>
    <updated date="2021-05-18 05:56:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for userspace-rcu is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1731.html" id="ALBA-2021-1731" type="self" title="ALBA-2021-1731"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="userspace-rcu-devel" version="0.10.1" release="4.el8" epoch="0" arch="aarch64" src="userspace-rcu-0.10.1-4.el8.src.rpm">
          <filename>userspace-rcu-devel-0.10.1-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7226563290894ee4fb12fdebca61ac905a737f41a4368cb941f092815a2ead76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1765</id>
    <title>brltty bug fix and enhancement update</title>
    <issued date="2021-05-18 06:02:53"/>
    <updated date="2021-05-18 06:02:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for brltty is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1765.html" id="ALBA-2021-1765" type="self" title="ALBA-2021-1765"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="brlapi-devel" version="0.6.7" release="32.el8" epoch="0" arch="aarch64" src="brltty-5.6-32.el8.src.rpm">
          <filename>brlapi-devel-0.6.7-32.el8.aarch64.rpm</filename>
          <sum type="sha256">4446899fa6a6a8217c94279b212b474668240d76ad2edcadf7bd0c2e1d80e38f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1801</id>
    <title>libgpod bug fix and enhancement update</title>
    <issued date="2021-05-18 06:07:17"/>
    <updated date="2021-05-18 06:07:07"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libgpod is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1801.html" id="ALBA-2021-1801" type="self" title="ALBA-2021-1801"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libgpod-doc" version="0.8.3" release="24.el8" epoch="0" arch="aarch64" src="libgpod-0.8.3-24.el8.src.rpm">
          <filename>libgpod-doc-0.8.3-24.el8.aarch64.rpm</filename>
          <sum type="sha256">4008a3126d2ab3fd8da42a284644198ba263eec33fe2cad8c6c20c204722de1e</sum>
        </package>
        <package name="libgpod-devel" version="0.8.3" release="24.el8" epoch="0" arch="aarch64" src="libgpod-0.8.3-24.el8.src.rpm">
          <filename>libgpod-devel-0.8.3-24.el8.aarch64.rpm</filename>
          <sum type="sha256">4040ee3a9e9d4de9b269db7629e3d035bedf125b40d27bcde4e18f39ef5cc65f</sum>
        </package>
        <package name="libgpod" version="0.8.3" release="24.el8" epoch="0" arch="aarch64" src="libgpod-0.8.3-24.el8.src.rpm">
          <filename>libgpod-0.8.3-24.el8.aarch64.rpm</filename>
          <sum type="sha256">d2b276ebb92d65569210f79f403f92636af41439641f606ddc54aa643e6e5b39</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1802</id>
    <title>gnome-bluetooth bug fix and enhancement update</title>
    <issued date="2021-05-18 06:07:29"/>
    <updated date="2021-05-18 06:07:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for gnome-bluetooth is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1802.html" id="ALBA-2021-1802" type="self" title="ALBA-2021-1802"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gnome-bluetooth-libs-devel" version="3.34.3" release="1.el8" epoch="1" arch="aarch64" src="gnome-bluetooth-3.34.3-1.el8.src.rpm">
          <filename>gnome-bluetooth-libs-devel-3.34.3-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4bc4eb4129b3293c84c51ea6fd0de15c7c3a042c5cc36271d3103562ed11c7c0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1837</id>
    <title>liblangtag bug fix and enhancement update</title>
    <issued date="2021-05-18 06:12:32"/>
    <updated date="2021-05-18 06:12:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for liblangtag is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1837.html" id="ALBA-2021-1837" type="self" title="ALBA-2021-1837"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="liblangtag-doc" version="0.6.2" release="8.el8" epoch="0" arch="noarch" src="liblangtag-0.6.2-8.el8.src.rpm">
          <filename>liblangtag-doc-0.6.2-8.el8.noarch.rpm</filename>
          <sum type="sha256">0b82dcb3a4b2ea830e369fd4167a6c2f11a9e03ea8dc667f7e4517a88f8f7ec0</sum>
        </package>
        <package name="liblangtag-devel" version="0.6.2" release="8.el8" epoch="0" arch="aarch64" src="liblangtag-0.6.2-8.el8.src.rpm">
          <filename>liblangtag-devel-0.6.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">a1448f62204895093cec47e02ff0fff8523692beb8f346e2d2017143610e1422</sum>
        </package>
        <package name="liblangtag-gobject" version="0.6.2" release="8.el8" epoch="0" arch="aarch64" src="liblangtag-0.6.2-8.el8.src.rpm">
          <filename>liblangtag-gobject-0.6.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">c150427c0042a306d80731fc09dbbdb406741cfe12793e0587133b27e159ea6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1848</id>
    <title>dconf bug fix and enhancement update</title>
    <issued date="2021-05-18 06:14:23"/>
    <updated date="2021-05-18 06:14:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for dconf is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1848.html" id="ALBA-2021-1848" type="self" title="ALBA-2021-1848"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="dconf-devel" version="0.28.0" release="4.el8" epoch="0" arch="aarch64" src="dconf-0.28.0-4.el8.src.rpm">
          <filename>dconf-devel-0.28.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">1b32b9d68e0029a66cdc43f18daeb436ea4cf8ddfa2e510dde91d35fd55104e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1858</id>
    <title>sendmail bug fix and enhancement update</title>
    <issued date="2021-05-18 06:15:49"/>
    <updated date="2021-05-18 06:15:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for sendmail is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1858.html" id="ALBA-2021-1858" type="self" title="ALBA-2021-1858"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="sendmail-milter-devel" version="8.15.2" release="34.el8" epoch="0" arch="aarch64" src="sendmail-8.15.2-34.el8.src.rpm">
          <filename>sendmail-milter-devel-8.15.2-34.el8.aarch64.rpm</filename>
          <sum type="sha256">5fabba0c187dce4b4b09b149b2cd40da2e79f19da5e3c384f5886464642f24e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1902</id>
    <title>uuid bug fix and enhancement update</title>
    <issued date="2021-05-18 06:21:56"/>
    <updated date="2021-05-18 06:21:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for uuid is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1902.html" id="ALBA-2021-1902" type="self" title="ALBA-2021-1902"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="uuid-devel" version="1.6.2" release="43.el8" epoch="0" arch="aarch64" src="uuid-1.6.2-43.el8.src.rpm">
          <filename>uuid-devel-1.6.2-43.el8.aarch64.rpm</filename>
          <sum type="sha256">5cf568284f93d3f8f9f8ab7da2e5e9c7c4b34d35e2f0016f8fc4dfcbd7f63503</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1903</id>
    <title>pulseaudio bug fix and enhancement update</title>
    <issued date="2021-05-18 06:22:02"/>
    <updated date="2021-05-18 06:21:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for pulseaudio is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1903.html" id="ALBA-2021-1903" type="self" title="ALBA-2021-1903"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="twolame-devel" version="0.3.13" release="12.el8" epoch="0" arch="aarch64" src="twolame-0.3.13-12.el8.src.rpm">
          <filename>twolame-devel-0.3.13-12.el8.aarch64.rpm</filename>
          <sum type="sha256">ec155cf189cff013cce336f68d770b07f8e598b66b8bfdc0f3d2f0326e31d4a6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1912</id>
    <title>ilmbase bug fix and enhancement update</title>
    <issued date="2021-05-18 06:23:12"/>
    <updated date="2021-05-18 06:23:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ilmbase is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1912.html" id="ALBA-2021-1912" type="self" title="ALBA-2021-1912"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ilmbase-devel" version="2.2.0" release="13.el8" epoch="0" arch="aarch64" src="ilmbase-2.2.0-13.el8.src.rpm">
          <filename>ilmbase-devel-2.2.0-13.el8.aarch64.rpm</filename>
          <sum type="sha256">48ffd06699a4628e480755d9d72008d9a168ae68a9d1b5245498e68353f8f100</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1914</id>
    <title>libsmi bug fix and enhancement update</title>
    <issued date="2021-05-18 06:23:27"/>
    <updated date="2021-05-18 06:23:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libsmi is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1914.html" id="ALBA-2021-1914" type="self" title="ALBA-2021-1914"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsmi-devel" version="0.4.8" release="23.el8" epoch="0" arch="aarch64" src="libsmi-0.4.8-23.el8.src.rpm">
          <filename>libsmi-devel-0.4.8-23.el8.aarch64.rpm</filename>
          <sum type="sha256">35a319505cfe0f0df5c39fdd9287a89232caf7bec42ffae9226727ae4b7aa868</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:1942</id>
    <title>ibus-typing-booster bug fix and enhancement update</title>
    <issued date="2021-05-18 06:26:57"/>
    <updated date="2021-05-18 06:26:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ibus-typing-booster is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1942.html" id="ALBA-2021-1942" type="self" title="ALBA-2021-1942"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ibus-typing-booster-tests" version="2.1.0" release="5.el8" epoch="0" arch="noarch" src="ibus-typing-booster-2.1.0-5.el8.src.rpm">
          <filename>ibus-typing-booster-tests-2.1.0-5.el8.noarch.rpm</filename>
          <sum type="sha256">b43a1fec261d2b16cb584f445194b59bc3d7f1d035f32e988ff2319fdf3d93b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1948</id>
    <title>ibus-table bug fix and enhancement update</title>
    <issued date="2021-05-18 06:27:55"/>
    <updated date="2021-05-18 06:27:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ibus-table is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1948.html" id="ALBA-2021-1948" type="self" title="ALBA-2021-1948"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ibus-table-devel" version="1.9.18" release="6.el8" epoch="0" arch="noarch" src="ibus-table-1.9.18-6.el8.src.rpm">
          <filename>ibus-table-devel-1.9.18-6.el8.noarch.rpm</filename>
          <sum type="sha256">5b09b00a701b066169593c2d8ad7975105e52a639276be69c414bf19587ea465</sum>
        </package>
        <package name="ibus-table-tests" version="1.9.18" release="6.el8" epoch="0" arch="noarch" src="ibus-table-1.9.18-6.el8.src.rpm">
          <filename>ibus-table-tests-1.9.18-6.el8.noarch.rpm</filename>
          <sum type="sha256">d4049c5dfc7fba7cd2d75b7684857b3466e4a4f6bff54edde2a41bcc5bb9d566</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1961</id>
    <title>sombok bug fix and enhancement update</title>
    <issued date="2021-05-18 06:29:28"/>
    <updated date="2021-05-18 06:29:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for sombok is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1961.html" id="ALBA-2021-1961" type="self" title="ALBA-2021-1961"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="sombok" version="2.4.0" release="7.el8" epoch="0" arch="aarch64" src="sombok-2.4.0-7.el8.src.rpm">
          <filename>sombok-2.4.0-7.el8.aarch64.rpm</filename>
          <sum type="sha256">5dc2cd545359c429a79dd49d2d3d2fd987fb913e4675e70489ae6cd7b86091d2</sum>
        </package>
        <package name="sombok-devel" version="2.4.0" release="7.el8" epoch="0" arch="aarch64" src="sombok-2.4.0-7.el8.src.rpm">
          <filename>sombok-devel-2.4.0-7.el8.aarch64.rpm</filename>
          <sum type="sha256">7bbd9364b151cc52db7e42ec510cc5415ebe14f554269b5191859b090fbb095a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1964</id>
    <title>python-sphinx bug fix and enhancement update</title>
    <issued date="2021-05-18 06:29:55"/>
    <updated date="2021-05-18 06:29:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for python-sphinx is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1964.html" id="ALBA-2021-1964" type="self" title="ALBA-2021-1964"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="python3-sphinx" version="1.7.6" release="2.el8" epoch="1" arch="noarch" src="python-sphinx-1.7.6-2.el8.src.rpm">
          <filename>python3-sphinx-1.7.6-2.el8.noarch.rpm</filename>
          <sum type="sha256">6a8d810ed9ee19293cddcf6772d4a128e832b31e6ed2d4d5f268b03e76ca3143</sum>
        </package>
        <package name="python-sphinx-locale" version="1.7.6" release="2.el8" epoch="1" arch="noarch" src="python-sphinx-1.7.6-2.el8.src.rpm">
          <filename>python-sphinx-locale-1.7.6-2.el8.noarch.rpm</filename>
          <sum type="sha256">e1a17a8a3c2c90f9b50477806d55d61c638285423e8b44c263097eb2b9de40fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1966</id>
    <title>nasm bug fix and enhancement update</title>
    <issued date="2021-05-18 06:30:14"/>
    <updated date="2021-05-18 06:30:07"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for nasm is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1966.html" id="ALBA-2021-1966" type="self" title="ALBA-2021-1966"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="nasm" version="2.15.03" release="3.el8" epoch="0" arch="aarch64" src="nasm-2.15.03-3.el8.src.rpm">
          <filename>nasm-2.15.03-3.el8.aarch64.rpm</filename>
          <sum type="sha256">b4473faf29b50a32e7e5abb2f2b1b6dfcbe13a2c2919cd9f44b8adf9710dcad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1967</id>
    <title>fontforge bug fix and enhancement update</title>
    <issued date="2021-05-18 06:30:24"/>
    <updated date="2021-05-18 06:30:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for fontforge is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1967.html" id="ALBA-2021-1967" type="self" title="ALBA-2021-1967"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="fontforge" version="20200314" release="5.el8" epoch="0" arch="aarch64" src="fontforge-20200314-5.el8.src.rpm">
          <filename>fontforge-20200314-5.el8.aarch64.rpm</filename>
          <sum type="sha256">0e3ee6fa38d2c0590beadfe37ca95d92756a99c38b5589be22d1f1022ec9148d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1970</id>
    <title>scotch bug fix and enhancement update</title>
    <issued date="2021-05-18 06:31:00"/>
    <updated date="2021-05-18 06:30:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for scotch is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1970.html" id="ALBA-2021-1970" type="self" title="ALBA-2021-1970"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ptscotch-openmpi-devel" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>ptscotch-openmpi-devel-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">0ec91801c4d34eec0c5b8d22bd9439f76b719eb0f6e96aea12e32479120123db</sum>
        </package>
        <package name="ptscotch-mpich" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>ptscotch-mpich-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">3c7a02d79514ee2c91c129477b175372ddaf3eac4c38ab8894d86538d217e658</sum>
        </package>
        <package name="ptscotch-mpich-devel" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>ptscotch-mpich-devel-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">4a8e15d77bfcceda23403c92256717cbb61f51e68974eb35bd7592890f4d198f</sum>
        </package>
        <package name="scotch" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>scotch-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">5201ae7925418f5cfaecf08a4b150a312a362d3554b188f18e5f0d48d465f9a4</sum>
        </package>
        <package name="scotch-devel" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>scotch-devel-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">5ef669e76fa1e2ca9fc373157b5579b3f1f284b9a5c3e5110f53c675d3369d0e</sum>
        </package>
        <package name="ptscotch-openmpi" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>ptscotch-openmpi-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">b5eb27ffa1b84fb09d8bf7b8118f1a356f88ea55a5dd8c8be694a535c8e52104</sum>
        </package>
        <package name="ptscotch-mpich-devel-parmetis" version="6.0.5" release="3.el8" epoch="0" arch="aarch64" src="scotch-6.0.5-3.el8.src.rpm">
          <filename>ptscotch-mpich-devel-parmetis-6.0.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">b879727d2545ca13aa6ec2c8d23b268eaa4a039706f2a4fa37d324b98e20d497</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:1971</id>
    <title>lensfun bug fix and enhancement update</title>
    <issued date="2021-05-18 06:31:15"/>
    <updated date="2021-05-18 06:31:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for lensfun is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-1971.html" id="ALBA-2021-1971" type="self" title="ALBA-2021-1971"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="lensfun-devel" version="0.3.2" release="15.el8" epoch="0" arch="aarch64" src="lensfun-0.3.2-15.el8.src.rpm">
          <filename>lensfun-devel-0.3.2-15.el8.aarch64.rpm</filename>
          <sum type="sha256">a4efaf1fa0a0909ef8a40eaab41ec4fcc6fb9e383ce0d319e1db22759598fba0</sum>
        </package>
        <package name="lensfun" version="0.3.2" release="15.el8" epoch="0" arch="aarch64" src="lensfun-0.3.2-15.el8.src.rpm">
          <filename>lensfun-0.3.2-15.el8.aarch64.rpm</filename>
          <sum type="sha256">ae1d29aeb0d5a0cf8b2bee468a5ada8a1b7bf0f5356ba73f581d297786bc7bc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:3594</id>
    <title>libdb bug fix and enhancement update</title>
    <issued date="2021-09-21 07:13:51"/>
    <updated date="2021-09-21 07:13:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for libdb is now available for AlmaLinux</summary>
    <description>The libdb packages provide the Berkeley Database, an embedded database
supporting both traditional and client/server applications.

Bug Fix(es) and Enhancement(s):

* [FJ8.4 Bug]: [REG]The rpm command hangs and the CPU usage reaches 100%
(BZ#2001972)</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-3594.html" id="ALBA-2021-3594" type="self" title="ALBA-2021-3594"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libdb-cxx" version="5.3.28" release="42.el8_4" epoch="0" arch="aarch64" src="libdb-5.3.28-42.el8_4.src.rpm">
          <filename>libdb-cxx-5.3.28-42.el8_4.aarch64.rpm</filename>
          <sum type="sha256">0c5710bddb3ab3ca51fb910b9896d6cf6fc39e25a9922187436e4164190b2985</sum>
        </package>
        <package name="libdb-devel-doc" version="5.3.28" release="42.el8_4" epoch="0" arch="noarch" src="libdb-5.3.28-42.el8_4.src.rpm">
          <filename>libdb-devel-doc-5.3.28-42.el8_4.noarch.rpm</filename>
          <sum type="sha256">476055f0467be8dc9f551c62b53bb3308fb2569835ba55c3f7ef08642efba2c2</sum>
        </package>
        <package name="libdb-sql-devel" version="5.3.28" release="42.el8_4" epoch="0" arch="aarch64" src="libdb-5.3.28-42.el8_4.src.rpm">
          <filename>libdb-sql-devel-5.3.28-42.el8_4.aarch64.rpm</filename>
          <sum type="sha256">713d8de10ca23b39cf2eb94859e08192953946bfa50658ffe1bc144918699822</sum>
        </package>
        <package name="libdb-cxx-devel" version="5.3.28" release="42.el8_4" epoch="0" arch="aarch64" src="libdb-5.3.28-42.el8_4.src.rpm">
          <filename>libdb-cxx-devel-5.3.28-42.el8_4.aarch64.rpm</filename>
          <sum type="sha256">71ef649fb60cd311e3274060afd4ca091c8a84355d504e8df0388bce09a9b2c0</sum>
        </package>
        <package name="libdb-sql" version="5.3.28" release="42.el8_4" epoch="0" arch="aarch64" src="libdb-5.3.28-42.el8_4.src.rpm">
          <filename>libdb-sql-5.3.28-42.el8_4.aarch64.rpm</filename>
          <sum type="sha256">da8812f05d3d2d68b6a6e267cee8b098e2486b9e7dba7c926bf5a5eebbdc63f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4180</id>
    <title>evolution, evolution-data-server, evolution-ews bug fix and enhancement update</title>
    <issued date="2021-11-09 08:33:08"/>
    <updated date="2021-11-09 12:49:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for evolution, evolution-data-server, and evolution-ews is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4180.html" id="ALBA-2021-4180" type="self" title="ALBA-2021-4180"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="evolution-devel" version="3.28.5" release="18.el8" epoch="0" arch="aarch64" src="evolution-3.28.5-18.el8.src.rpm">
          <filename>evolution-devel-3.28.5-18.el8.aarch64.rpm</filename>
          <sum type="sha256">c0bb56d744b951c32dea34532c62a16925ab7fedfe191bdbec4cab7d77fad76f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4190</id>
    <title>wireshark bug fix and enhancement update</title>
    <issued date="2021-11-09 08:35:11"/>
    <updated date="2021-11-09 12:50:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for wireshark is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4190.html" id="ALBA-2021-4190" type="self" title="ALBA-2021-4190"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="wireshark-devel" version="2.6.2" release="14.el8" epoch="1" arch="aarch64" src="wireshark-2.6.2-14.el8.src.rpm">
          <filename>wireshark-devel-2.6.2-14.el8.aarch64.rpm</filename>
          <sum type="sha256">e4b8fee054586056becdcef79ac5b03a78b80e854e45d84f4b3e61feb88f0e08</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4219</id>
    <title>libinput and libevdev bug fix and enhancement update</title>
    <issued date="2021-11-09 08:44:21"/>
    <updated date="2021-11-09 12:53:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libinput and libevdev is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4219.html" id="ALBA-2021-4219" type="self" title="ALBA-2021-4219"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libinput-devel" version="1.16.3" release="2.el8" epoch="0" arch="aarch64" src="libinput-1.16.3-2.el8.src.rpm">
          <filename>libinput-devel-1.16.3-2.el8.aarch64.rpm</filename>
          <sum type="sha256">38719331c7edf335904a75f2b7524061b682ce48cd86027c5ac5cc7edbdf8be3</sum>
        </package>
        <package name="libevdev-devel" version="1.10.0" release="1.el8" epoch="0" arch="aarch64" src="libevdev-1.10.0-1.el8.src.rpm">
          <filename>libevdev-devel-1.10.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">aa2d1331221feb5c17689ed7b8d98d1ea72905b9d9b18b8f716a10a5013c1ac7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4224</id>
    <title>libwacom bug fix and enhancement update</title>
    <issued date="2021-11-09 08:46:43"/>
    <updated date="2021-11-09 12:54:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libwacom is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4224.html" id="ALBA-2021-4224" type="self" title="ALBA-2021-4224"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libwacom-devel" version="1.6" release="3.el8" epoch="0" arch="aarch64" src="libwacom-1.6-3.el8.src.rpm">
          <filename>libwacom-devel-1.6-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f641765577be8242d56410e0c6048b4107655381818f4adc215c37d9a7b5f7dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4232</id>
    <title>dyninst bug fix and enhancement update</title>
    <issued date="2021-11-09 08:47:31"/>
    <updated date="2021-11-09 12:55:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for dyninst is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4232.html" id="ALBA-2021-4232" type="self" title="ALBA-2021-4232"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="dyninst-devel" version="11.0.0" release="3.el8" epoch="0" arch="aarch64" src="dyninst-11.0.0-3.el8.src.rpm">
          <filename>dyninst-devel-11.0.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">29f767e0544f5fecd1389ab90cb626dfa3823e9e4e7ba52d6e401838f40fe710</sum>
        </package>
        <package name="dyninst-testsuite" version="11.0.0" release="3.el8" epoch="0" arch="aarch64" src="dyninst-11.0.0-3.el8.src.rpm">
          <filename>dyninst-testsuite-11.0.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">49a0055a95f0c28361b2201a753ebd9ae20b60b949eeffc2cb8b58e338a96972</sum>
        </package>
        <package name="dyninst-static" version="11.0.0" release="3.el8" epoch="0" arch="aarch64" src="dyninst-11.0.0-3.el8.src.rpm">
          <filename>dyninst-static-11.0.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">897ecbc3f24146719cf1c1225f49bff00266402a05b05d95c5d3004b197428d8</sum>
        </package>
        <package name="dyninst-doc" version="11.0.0" release="3.el8" epoch="0" arch="aarch64" src="dyninst-11.0.0-3.el8.src.rpm">
          <filename>dyninst-doc-11.0.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d55b1be86065f793523eb77b9bf711635c50855aa445916583bf456e3d5cba24</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4253</id>
    <title>cups-filters bug fix and enhancement update</title>
    <issued date="2021-11-09 08:51:15"/>
    <updated date="2021-11-09 12:59:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for cups-filters is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4253.html" id="ALBA-2021-4253" type="self" title="ALBA-2021-4253"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="cups-filters-devel" version="1.20.0" release="27.el8" epoch="0" arch="aarch64" src="cups-filters-1.20.0-27.el8.src.rpm">
          <filename>cups-filters-devel-1.20.0-27.el8.aarch64.rpm</filename>
          <sum type="sha256">aef80c245acbe5d58b4a5a020ea755c7729ebc6cd518a7f2d1f34f21a7b74922</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4269</id>
    <title>papi bug fix and enhancement update</title>
    <issued date="2021-11-09 08:53:57"/>
    <updated date="2021-11-09 13:00:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for papi is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4269.html" id="ALBA-2021-4269" type="self" title="ALBA-2021-4269"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="python3-libpfm" version="4.10.1" release="4.el8" epoch="0" arch="aarch64" src="libpfm-4.10.1-4.el8.src.rpm">
          <filename>python3-libpfm-4.10.1-4.el8.aarch64.rpm</filename>
          <sum type="sha256">3e1239e52e0dbe411ba104cf52348ff3d12f23ee50126bdf5e9b82fcfdae389b</sum>
        </package>
        <package name="papi-testsuite" version="5.6.0" release="14.el8" epoch="0" arch="aarch64" src="papi-5.6.0-14.el8.src.rpm">
          <filename>papi-testsuite-5.6.0-14.el8.aarch64.rpm</filename>
          <sum type="sha256">94fb779dae76135e795df35601f9b9ac85a1a56b89fec059cb9168f6e1b67bf1</sum>
        </package>
        <package name="libpfm-static" version="4.10.1" release="4.el8" epoch="0" arch="aarch64" src="libpfm-4.10.1-4.el8.src.rpm">
          <filename>libpfm-static-4.10.1-4.el8.aarch64.rpm</filename>
          <sum type="sha256">ac6b782256d801707e7c01d18188a9f3e0161323436a23f9308ed2206092d6e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4285</id>
    <title>libvoikko bug fix and enhancement update</title>
    <issued date="2021-11-09 08:55:07"/>
    <updated date="2021-11-09 13:01:05"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libvoikko is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4285.html" id="ALBA-2021-4285" type="self" title="ALBA-2021-4285"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libvoikko-devel" version="4.1.1" release="3.el8" epoch="0" arch="aarch64" src="libvoikko-4.1.1-3.el8.src.rpm">
          <filename>libvoikko-devel-4.1.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">35fd8f8c607cb291798d6acdbb05eb2dbdd7de7331fcbc328645b6446aad94e9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4336</id>
    <title>libnma bug fix and enhancement update</title>
    <issued date="2021-11-09 09:01:49"/>
    <updated date="2021-11-09 13:03:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libnma is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4336.html" id="ALBA-2021-4336" type="self" title="ALBA-2021-4336"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libnma-devel" version="1.8.32" release="1.el8" epoch="0" arch="aarch64" src="libnma-1.8.32-1.el8.src.rpm">
          <filename>libnma-devel-1.8.32-1.el8.aarch64.rpm</filename>
          <sum type="sha256">9f5de5dcceb959ba501e94e09e34d0bd1329c40793e4fa289365b9063db8bb02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4348</id>
    <title>brasero bug fix and enhancement update</title>
    <issued date="2021-11-09 09:06:19"/>
    <updated date="2021-11-09 13:04:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for brasero is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4348.html" id="ALBA-2021-4348" type="self" title="ALBA-2021-4348"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="brasero-libs" version="3.12.2" release="5.el8" epoch="0" arch="aarch64" src="brasero-3.12.2-5.el8.src.rpm">
          <filename>brasero-libs-3.12.2-5.el8.aarch64.rpm</filename>
          <sum type="sha256">6976005abf4b0d5d7a92f0edf0a48af148e7760b0ccb2666d8a92a0d4c142413</sum>
        </package>
        <package name="brasero-devel" version="3.12.2" release="5.el8" epoch="0" arch="aarch64" src="brasero-3.12.2-5.el8.src.rpm">
          <filename>brasero-devel-3.12.2-5.el8.aarch64.rpm</filename>
          <sum type="sha256">91a409825914aeb7e8dab5773bf5e589e99f4872b59758b0f14d23045a29b2aa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4371</id>
    <title>libxcrypt bug fix and enhancement update</title>
    <issued date="2021-11-09 09:12:04"/>
    <updated date="2021-11-09 13:07:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libxcrypt is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4371.html" id="ALBA-2021-4371" type="self" title="ALBA-2021-4371"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libxcrypt-static" version="4.1.1" release="6.el8" epoch="0" arch="aarch64" src="libxcrypt-4.1.1-6.el8.src.rpm">
          <filename>libxcrypt-static-4.1.1-6.el8.aarch64.rpm</filename>
          <sum type="sha256">fadae62234d0ef5f01c8d1b6f642df16344889d2765cc8375a0d48eb9ab7ffa2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4377</id>
    <title>quota bug fix and enhancement update</title>
    <issued date="2021-11-09 09:14:15"/>
    <updated date="2021-11-09 13:09:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for quota is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4377.html" id="ALBA-2021-4377" type="self" title="ALBA-2021-4377"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="quota-devel" version="4.04" release="14.el8" epoch="1" arch="aarch64" src="quota-4.04-14.el8.src.rpm">
          <filename>quota-devel-4.04-14.el8.aarch64.rpm</filename>
          <sum type="sha256">99b7b4e32201ecd777b32946d75d5fbfac02193cfdbda2e7b6f55bdd8d81d659</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4412</id>
    <title>RDMA stack bug fix and enhancement update</title>
    <issued date="2021-11-09 09:19:05"/>
    <updated date="2021-11-09 13:12:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for RDMA stack is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4412.html" id="ALBA-2021-4412" type="self" title="ALBA-2021-4412"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="opensm-devel" version="3.3.24" release="1.el8" epoch="0" arch="aarch64" src="opensm-3.3.24-1.el8.src.rpm">
          <filename>opensm-devel-3.3.24-1.el8.aarch64.rpm</filename>
          <sum type="sha256">72929435c649f375439198eaecaecc89c3fb877d6245a5d170317b040fd52e56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4446</id>
    <title>iscsi-initiator-utils bug fix and enhancement update</title>
    <issued date="2021-11-09 09:22:49"/>
    <updated date="2021-11-09 13:15:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for iscsi-initiator-utils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4446.html" id="ALBA-2021-4446" type="self" title="ALBA-2021-4446"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="iscsi-initiator-utils-devel" version="6.2.1.4" release="4.git095f59c.el8" epoch="0" arch="aarch64" src="iscsi-initiator-utils-6.2.1.4-4.git095f59c.el8.src.rpm">
          <filename>iscsi-initiator-utils-devel-6.2.1.4-4.git095f59c.el8.aarch64.rpm</filename>
          <sum type="sha256">5e93d57d5349d28e78b947d2f1e784926e575c0ef852ff9b5836db3fa7d942d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4475</id>
    <title>freeipmi bug fix and enhancement update</title>
    <issued date="2021-11-09 09:28:16"/>
    <updated date="2021-11-09 13:18:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for freeipmi is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4475.html" id="ALBA-2021-4475" type="self" title="ALBA-2021-4475"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="freeipmi-devel" version="1.6.8" release="1.el8" epoch="0" arch="aarch64" src="freeipmi-1.6.8-1.el8.src.rpm">
          <filename>freeipmi-devel-1.6.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4e791ff7156ff80a6f92be627f3897d7bc9b7a3d820c7eb501615c8aa565bf5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4477</id>
    <title>parted bug fix and enhancement update</title>
    <issued date="2021-11-09 09:28:36"/>
    <updated date="2021-11-09 13:18:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for parted is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4477.html" id="ALBA-2021-4477" type="self" title="ALBA-2021-4477"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="parted-devel" version="3.2" release="39.el8" epoch="0" arch="aarch64" src="parted-3.2-39.el8.src.rpm">
          <filename>parted-devel-3.2-39.el8.aarch64.rpm</filename>
          <sum type="sha256">8acf90d116db1b99294cc7e1409a61847afbb67c49ec1b3c2ad28fb3a219532c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4483</id>
    <title>OpenIPMI bug fix and enhancement update</title>
    <issued date="2021-11-09 09:30:08"/>
    <updated date="2021-11-09 13:18:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for OpenIPMI is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4483.html" id="ALBA-2021-4483" type="self" title="ALBA-2021-4483"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="OpenIPMI-devel" version="2.0.31" release="3.el8" epoch="0" arch="aarch64" src="OpenIPMI-2.0.31-3.el8.src.rpm">
          <filename>OpenIPMI-devel-2.0.31-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d7122e7fec00251387bcf2395c747b3b5dcd7b82aa07866335fc57a361a124d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4502</id>
    <title>glusterfs bug fix and enhancement update</title>
    <issued date="2021-11-09 09:35:28"/>
    <updated date="2021-11-09 13:20:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for glusterfs is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4502.html" id="ALBA-2021-4502" type="self" title="ALBA-2021-4502"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="glusterfs-api-devel" version="6.0" release="56.4.el8" epoch="0" arch="aarch64" src="glusterfs-6.0-56.4.el8.src.rpm">
          <filename>glusterfs-api-devel-6.0-56.4.el8.aarch64.rpm</filename>
          <sum type="sha256">2fcc67c63b847af2727f00917ecc94c0cd0c70ba3d06b1b07b88525c3550b8cd</sum>
        </package>
        <package name="glusterfs-devel" version="6.0" release="56.4.el8" epoch="0" arch="aarch64" src="glusterfs-6.0-56.4.el8.src.rpm">
          <filename>glusterfs-devel-6.0-56.4.el8.aarch64.rpm</filename>
          <sum type="sha256">96598157c26c79d5e51046406cef36e52142d18df090344e249ee75c1df4ed76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4505</id>
    <title>mobile-broadband-provider-info bug fix and enhancement update</title>
    <issued date="2021-11-09 09:35:48"/>
    <updated date="2021-11-09 13:21:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for mobile-broadband-provider-info is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4505.html" id="ALBA-2021-4505" type="self" title="ALBA-2021-4505"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="mobile-broadband-provider-info-devel" version="20210805" release="1.el8" epoch="0" arch="noarch" src="mobile-broadband-provider-info-20210805-1.el8.src.rpm">
          <filename>mobile-broadband-provider-info-devel-20210805-1.el8.noarch.rpm</filename>
          <sum type="sha256">7e9402853c7e477c910ad467c8cd82e46f29ed2a18c9cb28fa9f06b390c71d28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4507</id>
    <title>fontconfig bug fix and enhancement update</title>
    <issued date="2021-11-09 09:36:39"/>
    <updated date="2021-11-09 13:21:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for fontconfig is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4507.html" id="ALBA-2021-4507" type="self" title="ALBA-2021-4507"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="fontconfig-devel-doc" version="2.13.1" release="4.el8" epoch="0" arch="noarch" src="fontconfig-2.13.1-4.el8.src.rpm">
          <filename>fontconfig-devel-doc-2.13.1-4.el8.noarch.rpm</filename>
          <sum type="sha256">f4aaabd796eff4e666fe4575d0c9ff7054d5601ea32916f0dde4fcf62a338fdc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4523</id>
    <title>cppcheck bug fix and enhancement update</title>
    <issued date="2021-11-09 09:42:21"/>
    <updated date="2021-11-09 13:23:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for cppcheck is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4523.html" id="ALBA-2021-4523" type="self" title="ALBA-2021-4523"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="cppcheck" version="2.4" release="1.el8" epoch="0" arch="aarch64" src="cppcheck-2.4-1.el8.src.rpm">
          <filename>cppcheck-2.4-1.el8.aarch64.rpm</filename>
          <sum type="sha256">7e89871a19cc8176138e1856360ef342b5187e1658e75b46b19584c1f8ab453f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="2">
    <id>ALBA-2021:4525</id>
    <title>mingw-filesystem bug fix and enhancement update</title>
    <issued date="2021-11-09 09:43:26"/>
    <updated date="2021-11-09 13:23:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for mingw-filesystem is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4525.html" id="ALBA-2021-4525" type="self" title="ALBA-2021-4525"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="mingw64-filesystem" version="104" release="3.el8" epoch="0" arch="noarch" src="mingw-filesystem-104-3.el8.src.rpm">
          <filename>mingw64-filesystem-104-3.el8.noarch.rpm</filename>
          <sum type="sha256">4d24f15d89426556973112b30e2ca050ee538e64baa1b4fb92e1f14e18e0c52a</sum>
        </package>
        <package name="mingw-filesystem-base" version="104" release="3.el8" epoch="0" arch="noarch" src="mingw-filesystem-104-3.el8.src.rpm">
          <filename>mingw-filesystem-base-104-3.el8.noarch.rpm</filename>
          <sum type="sha256">846a92e731ad21c4e6b9b001218ee9a90ea80f0103b2b0870d52357c43531208</sum>
        </package>
        <package name="mingw32-filesystem" version="104" release="3.el8" epoch="0" arch="noarch" src="mingw-filesystem-104-3.el8.src.rpm">
          <filename>mingw32-filesystem-104-3.el8.noarch.rpm</filename>
          <sum type="sha256">f1c0f4da22e6702ae99aa15e9a76bb0edd4dcb9f7fd665978b705d98f32824e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2021:4533</id>
    <title>ibus bug fix update</title>
    <issued date="2021-11-09 19:24:51"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ibus is now available for AlmaLinux</summary>
    <description>The Intelligent Input Bus (IBus) is an input method framework for multilingual input in Unix-like operating systems.

Bug fix:

* Previously, in GNOME Wayland desktop in AlmaLinux 8.5, the IBus emoji candidate pop-up was used with IBus UI and the selected candidate could not inserted into the target input focus smartly. With this update, the IBus emoji candidate pop-up is used with GNOME-Shell UI in GNOME Wayland desktop and the selected candidate is inserted into the input focus correctly. (BZ#2014064)</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2021-4533.html" id="ALBA-2021-4533" type="self" title="ALBA-2021-4533"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ibus-devel-docs" version="1.5.19" release="14.el8_5" epoch="0" arch="noarch" src="ibus-1.5.19-14.el8_5.src.rpm">
          <filename>ibus-devel-docs-1.5.19-14.el8_5.noarch.rpm</filename>
          <sum type="sha256">13ede9be251aa3438c009254d9042cb308f67f3330f734d1c3e0c6da38b346f1</sum>
        </package>
        <package name="ibus-devel" version="1.5.19" release="14.el8_5" epoch="0" arch="aarch64" src="ibus-1.5.19-14.el8_5.src.rpm">
          <filename>ibus-devel-1.5.19-14.el8_5.aarch64.rpm</filename>
          <sum type="sha256">2babb8085ca50564f7f0ebdeec5eea2daa4a25834eafa2d14f9494143c0406f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1731</id>
    <title>java-1.8.0-openjdk bug fix and enhancement update</title>
    <issued date="2022-05-10 14:59:51"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for java-1.8.0-openjdk is now available for AlmaLinux</summary>
    <description>This erratum reinstates changes made to java-1.8.0-openjdk in AlmaLinux 8.6 GA.  The original builds for AlmaLinux 8.6 GA will have been superseded by newer binaries released as part of the April 2022 security update for AlmaLinux 8.5.

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1731.html" id="ALBA-2022-1731" type="self" title="ALBA-2022-1731"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">28918a92faf63946845ddce36d7133482a1be8fd7f9177116696f4f8c9f1b83d</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">309d7446c678adfea1ab379c9798a4822e512b0eecba518b2767cf5a60a442bc</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">49b0c18095f84d12d0ceb203212e49fd90d35bb02d63cd92956794e2107e0da0</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">565514def49caff8d843959243ae21049ba9cbc5fbe8b9261a24d61fb39b09ae</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">88541c29384e22685ed7dfc86805cfe1358d5b77ba1847b2847f4c532f531f53</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8d61fff2d866242a4d14fe4314e8c172f0377e4ebca0fa1e5dafce30621072d1</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a9e490c76e192914284c4d967df1f505f27cf5618ea282f5cfbe405c7df4c964</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b10cfabb9ca890426fa5e383acde4b1ced706b3eade7955f3907a32855532d0d</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">de9c8e8d68015131f0b9dbd9b7ad84ee6e27f8aab177e09eeb3e33b8c7a97cfb</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">e49dd7ae45adf468ea98980e9ab2633c52066e6b874e7a8210dafaa27ac184de</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">eca8c4a5e784f8fdf86b543bdbc8750a9ee126b69d93a6a6003480b3347c5e56</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.332.b09" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.332.b09-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">f12165430200a8c6a631f789a790d427e75d0af930b2b55c3373ba9609dfd0d5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1732</id>
    <title>java-11-openjdk bug fix and enhancement update</title>
    <issued date="2022-05-10 14:59:42"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for java-11-openjdk is now available for AlmaLinux</summary>
    <description>This erratum reinstates changes made to java-11-openjdk in AlmaLinux 8.6 GA.  The
original builds for AlmaLinux 8.6 GA will have been superseded by newer binaries
released as part of the April 2022 security update for AlmaLinux 8.5.

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1732.html" id="ALBA-2022-1732" type="self" title="ALBA-2022-1732"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">02ec11ccba7c73946dbb7323ef92bca6a3115971b108e234f4f6601d24f421b3</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0a3f045ed46c8624b7555ae7c9f3d6a4186b8abec826fde7b1ea99052917f4c6</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">224c1c89133d36142d1f3544686f4abc89739d496928730bc7bdad7f028c6457</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">7699ca75f4e5f9470d3ccdede1db3da0dbda8343eebce241d62fe6c3c597a046</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9132c0b37c90067dfba106b94e9d7e325e40541f36aee1f41ded1ef10a5b47fc</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ea5acd67db39e298394f6b45b2daad9be570a85b4e5094ec915abf49f1090747</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.15.0.10" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.10-2.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.15.0.10-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">f0b07a7a5c900774c8d7937be358b4714b6248d4c9a3d7444bd3109931dab71a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1760</id>
    <title>poppler bug fix and enhancement update</title>
    <issued date="2022-05-10 07:59:59"/>
    <updated date="2022-05-10 07:59:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for poppler is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1760.html" id="ALBA-2022-1760" type="self" title="ALBA-2022-1760"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="poppler-glib-devel" version="20.11.0" release="4.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-4.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">475141bc112d4f6696dc2a29043101ad154946aea3726f4847523408d822c923</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="4.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-4.el8.src.rpm">
          <filename>poppler-devel-20.11.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">6e6743129585740734156e8f88b02b8aa004f1f5135e02de80cf3d96e5b8ea9d</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="4.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-4.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7c864bb215b616ef8ae3dbd1c6e84c40d51d158776ab18e59871cd61d8814968</sum>
        </package>
        <package name="poppler-qt5" version="20.11.0" release="4.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-4.el8.src.rpm">
          <filename>poppler-qt5-20.11.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">96845d3a1508710f8e92006cd97cfc10887ab931e54c33592950617e971f3abe</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="4.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-4.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">a342c9844935253e16788bfc8c93a4aee61a3b46b0332683429938275eb32fbe</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="4.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-4.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">e337033a0a91369d7dec61fe6bb0a76cddcc758dc32d93536391829fd3e1e7b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1769</id>
    <title>libgit2-glib bug fix and enhancement update</title>
    <issued date="2022-05-10 08:00:10"/>
    <updated date="2022-05-10 08:00:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libgit2-glib is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1769.html" id="ALBA-2022-1769" type="self" title="ALBA-2022-1769"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libgit2-glib-devel" version="0.26.4" release="3.el8" epoch="0" arch="aarch64" src="libgit2-glib-0.26.4-3.el8.src.rpm">
          <filename>libgit2-glib-devel-0.26.4-3.el8.aarch64.rpm</filename>
          <sum type="sha256">ea94c60013b230396a3c54aa5db30183b5c0e46852416372463c21262c9597c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1770</id>
    <title>evince bug fix and enhancement update</title>
    <issued date="2022-05-10 06:23:54"/>
    <updated date="2022-05-10 08:00:10"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for evince is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1770.html" id="ALBA-2022-1770" type="self" title="ALBA-2022-1770"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="evince-devel" version="3.28.4" release="16.el8" epoch="0" arch="aarch64" src="evince-3.28.4-16.el8.src.rpm">
          <filename>evince-devel-3.28.4-16.el8.aarch64.rpm</filename>
          <sum type="sha256">c6c84f92fab9cd3bc8e9e68f6fa55b79535865bf7800af8200e52a76ecb0dee8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1771</id>
    <title>gdm bug fix and enhancement update</title>
    <issued date="2022-05-10 06:23:57"/>
    <updated date="2022-05-10 08:00:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for gdm is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1771.html" id="ALBA-2022-1771" type="self" title="ALBA-2022-1771"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gdm-devel" version="40.0" release="23.el8" epoch="1" arch="aarch64" src="gdm-40.0-23.el8.src.rpm">
          <filename>gdm-devel-40.0-23.el8.aarch64.rpm</filename>
          <sum type="sha256">1c27f155ef5294018636347a5942f9e87c589cce8a0231cfebfc592c13f2f97d</sum>
        </package>
        <package name="gdm-pam-extensions-devel" version="40.0" release="23.el8" epoch="1" arch="aarch64" src="gdm-40.0-23.el8.src.rpm">
          <filename>gdm-pam-extensions-devel-40.0-23.el8.aarch64.rpm</filename>
          <sum type="sha256">b2705d71396e37adff9adf8e201fff8d8f799393f7099a2787d17e2d5455bc38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1782</id>
    <title>evolution-data-server bug fix and enhancement update</title>
    <issued date="2022-05-10 08:00:38"/>
    <updated date="2022-05-10 08:00:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for evolution-data-server is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1782.html" id="ALBA-2022-1782" type="self" title="ALBA-2022-1782"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="evolution-data-server-tests" version="3.28.5" release="19.el8" epoch="0" arch="aarch64" src="evolution-data-server-3.28.5-19.el8.src.rpm">
          <filename>evolution-data-server-tests-3.28.5-19.el8.aarch64.rpm</filename>
          <sum type="sha256">3ed94293b699d8420e1158830cccbdf0a9d7154b8d011b1256b26ae0f1dfcc85</sum>
        </package>
        <package name="evolution-data-server-doc" version="3.28.5" release="19.el8" epoch="0" arch="noarch" src="evolution-data-server-3.28.5-19.el8.src.rpm">
          <filename>evolution-data-server-doc-3.28.5-19.el8.noarch.rpm</filename>
          <sum type="sha256">4c9c24ab5fbf0fb99fb505d83ebd9af43d4d312e0079dc728e07c089540e9471</sum>
        </package>
        <package name="evolution-data-server-perl" version="3.28.5" release="19.el8" epoch="0" arch="aarch64" src="evolution-data-server-3.28.5-19.el8.src.rpm">
          <filename>evolution-data-server-perl-3.28.5-19.el8.aarch64.rpm</filename>
          <sum type="sha256">9eb4d6127f5b3c6b59251cde12602e4fd225b1bb25d419c5e15b8bd69d4875a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1788</id>
    <title>jq bug fix and enhancement update</title>
    <issued date="2022-05-10 08:01:22"/>
    <updated date="2022-05-10 08:01:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for jq is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1788.html" id="ALBA-2022-1788" type="self" title="ALBA-2022-1788"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="jq-devel" version="1.6" release="3.el8" epoch="0" arch="aarch64" src="jq-1.6-3.el8.src.rpm">
          <filename>jq-devel-1.6-3.el8.aarch64.rpm</filename>
          <sum type="sha256">01b195571e5da54bb3e146d9ce5abc3d48d07862199127da90537069663faa92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1790</id>
    <title>libpinyin bug fix and enhancement update</title>
    <issued date="2022-05-10 06:26:23"/>
    <updated date="2022-05-10 08:01:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libpinyin is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1790.html" id="ALBA-2022-1790" type="self" title="ALBA-2022-1790"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libpinyin-devel" version="2.2.0" release="2.el8" epoch="0" arch="aarch64" src="libpinyin-2.2.0-2.el8.src.rpm">
          <filename>libpinyin-devel-2.2.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5c6e6e30a85a1addea59398300ae52888f37e2b9f7b40e0a50937e910e28638f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1794</id>
    <title>libmemcached bug fix and enhancement update</title>
    <issued date="2022-05-10 06:27:06"/>
    <updated date="2022-05-10 08:01:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libmemcached is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1794.html" id="ALBA-2022-1794" type="self" title="ALBA-2022-1794"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libmemcached-devel" version="1.0.18" release="17.el8" epoch="0" arch="aarch64" src="libmemcached-1.0.18-17.el8.src.rpm">
          <filename>libmemcached-devel-1.0.18-17.el8.aarch64.rpm</filename>
          <sum type="sha256">ca19de6fcffe2a8c3b405fc75b76f1fdb0b9e956bf0d6dca05e442855f99773e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1800</id>
    <title>accountsservice bug fix and enhancement update</title>
    <issued date="2022-05-10 06:27:39"/>
    <updated date="2022-05-10 08:01:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for accountsservice is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1800.html" id="ALBA-2022-1800" type="self" title="ALBA-2022-1800"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="accountsservice-devel" version="0.6.55" release="4.el8" epoch="0" arch="aarch64" src="accountsservice-0.6.55-4.el8.src.rpm">
          <filename>accountsservice-devel-0.6.55-4.el8.aarch64.rpm</filename>
          <sum type="sha256">528d0ad2f447eb6dbd448eaef42950b2ca98bfecea9f1740290e5c3a7d8e5442</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1813</id>
    <title>openblas bug fix and enhancement update</title>
    <issued date="2022-05-10 08:02:28"/>
    <updated date="2022-05-10 08:02:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for openblas is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1813.html" id="ALBA-2022-1813" type="self" title="ALBA-2022-1813"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="openblas-devel" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-devel-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">1ad4fcf3fdafcb5dca5dd3d42d6926533d3dc49ffa3293e318b937fc24962216</sum>
        </package>
        <package name="openblas-Rblas" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-Rblas-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">2e3178ba27d9501281151edf01cff6dc0d19b827acc25d783d499dfda88755bb</sum>
        </package>
        <package name="openblas-static" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-static-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">325a3c646df0cdaac08cac0720b3595afdfab65fc112faf1c4b17013bc4e330e</sum>
        </package>
        <package name="openblas-openmp64_" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-openmp64_-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">499ef282e5c81eeae1e106e21b4e2993e9bc6320a18c689a7fdb66bcb5eab307</sum>
        </package>
        <package name="openblas-serial64" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-serial64-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">623e18d71b5d6800d8ad0f7eb68108df506e01a257ac177070b9cf8a0a99d2ef</sum>
        </package>
        <package name="openblas-serial64_" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-serial64_-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">a7b92ceb6558b834284d1e278702537621b2e5a12e15649f37384064fa7044dd</sum>
        </package>
        <package name="openblas-threads64" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-threads64-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">ae8f9de4a5fb5bc137934575f3546c40158d52df86e8a7f6cec35b894bb4d144</sum>
        </package>
        <package name="openblas-openmp" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-openmp-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d596f80ab7bc03abb001009d479677a05a28ec0eeb4bd16e870bef9e0eb4028a</sum>
        </package>
        <package name="openblas-openmp64" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-openmp64-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">ea71c03dbcf0f6263ec6533dc139652a9a16f512c61c688f1b600a2365affddc</sum>
        </package>
        <package name="openblas-threads64_" version="0.3.15" release="3.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-3.el8.src.rpm">
          <filename>openblas-threads64_-0.3.15-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f4a7c931170851c288f0936c20744ca8fbcd2e473a1099b45c51460a4884bbb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1822</id>
    <title>ibus bug fix and enhancement update</title>
    <issued date="2022-05-10 06:30:04"/>
    <updated date="2022-05-10 08:02:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ibus is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1822.html" id="ALBA-2022-1822" type="self" title="ALBA-2022-1822"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ibus-devel-docs" version="1.5.19" release="14.el8_5" epoch="0" arch="noarch" src="ibus-1.5.19-14.el8_5.src.rpm">
          <filename>ibus-devel-docs-1.5.19-14.el8_5.noarch.rpm</filename>
          <sum type="sha256">13ede9be251aa3438c009254d9042cb308f67f3330f734d1c3e0c6da38b346f1</sum>
        </package>
        <package name="ibus-devel" version="1.5.19" release="14.el8_5" epoch="0" arch="aarch64" src="ibus-1.5.19-14.el8_5.src.rpm">
          <filename>ibus-devel-1.5.19-14.el8_5.aarch64.rpm</filename>
          <sum type="sha256">2babb8085ca50564f7f0ebdeec5eea2daa4a25834eafa2d14f9494143c0406f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1827</id>
    <title>librdkafka bug fix and enhancement update</title>
    <issued date="2022-05-10 06:30:45"/>
    <updated date="2022-05-10 08:03:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for librdkafka is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1827.html" id="ALBA-2022-1827" type="self" title="ALBA-2022-1827"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="librdkafka-devel" version="0.11.4" release="3.el8" epoch="0" arch="aarch64" src="librdkafka-0.11.4-3.el8.src.rpm">
          <filename>librdkafka-devel-0.11.4-3.el8.aarch64.rpm</filename>
          <sum type="sha256">cd1d369a97c84573f980b5c868d95f75c849d6c2575baad2cb76820c1b0d88b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1844</id>
    <title>openscap bug fix and enhancement update</title>
    <issued date="2022-05-10 06:31:47"/>
    <updated date="2022-05-10 08:04:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for openscap is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1844.html" id="ALBA-2022-1844" type="self" title="ALBA-2022-1844"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="openscap-engine-sce-devel" version="1.3.6" release="3.el8.alma" epoch="0" arch="aarch64" src="openscap-1.3.6-3.el8.alma.src.rpm">
          <filename>openscap-engine-sce-devel-1.3.6-3.el8.alma.aarch64.rpm</filename>
          <sum type="sha256">b8cbfcb7efe9353dd876afc0aa3553f652fd3c4b01bf8f8d24aa95a49dadd5c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="4">
    <id>ALBA-2022:1855</id>
    <title>mesa and related packages bug fix and enhancement update</title>
    <issued date="2022-05-10 06:32:43"/>
    <updated date="2022-05-10 08:04:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for mesa, libdrm, and libglvnd is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1855.html" id="ALBA-2022-1855" type="self" title="ALBA-2022-1855"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="mesa-libOSMesa-devel" version="21.3.4" release="1.el8" epoch="0" arch="aarch64" src="mesa-21.3.4-1.el8.src.rpm">
          <filename>mesa-libOSMesa-devel-21.3.4-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e7cf1055e49861f81bd011ffb62c70d4db1fe42aa2f5b2c724c282595baed7ea</sum>
        </package>
        <package name="mesa-libgbm-devel" version="21.3.4" release="1.el8" epoch="0" arch="aarch64" src="mesa-21.3.4-1.el8.src.rpm">
          <filename>mesa-libgbm-devel-21.3.4-1.el8.aarch64.rpm</filename>
          <sum type="sha256">eab76b79751cff17cbe1b785b14186cbde53f7b50b91d22d457f388fbaa6a57f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1864</id>
    <title>crash bug fix and enhancement update</title>
    <issued date="2022-05-10 08:04:52"/>
    <updated date="2022-05-10 08:04:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for crash is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1864.html" id="ALBA-2022-1864" type="self" title="ALBA-2022-1864"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="crash-devel" version="7.3.1" release="5.el8.alma" epoch="0" arch="aarch64" src="crash-7.3.1-5.el8.alma.src.rpm">
          <filename>crash-devel-7.3.1-5.el8.alma.aarch64.rpm</filename>
          <sum type="sha256">55b49f52ef6ba1997f94b08458f1f941407408234017332da84bb800a39b9f07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1871</id>
    <title>corosync bug fix and enhancement update</title>
    <issued date="2022-05-10 06:34:43"/>
    <updated date="2022-05-10 08:05:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for corosync is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1871.html" id="ALBA-2022-1871" type="self" title="ALBA-2022-1871"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="corosync-vqsim" version="3.1.5" release="2.el8" epoch="0" arch="aarch64" src="corosync-3.1.5-2.el8.src.rpm">
          <filename>corosync-vqsim-3.1.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3569bbc3dc18230755647799fd1a3ecbfe99824797d410c007a5387607891e34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1875</id>
    <title>adwaita-icon-theme bug fix and enhancement update</title>
    <issued date="2022-05-10 08:05:25"/>
    <updated date="2022-05-10 08:05:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for adwaita-icon-theme is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1875.html" id="ALBA-2022-1875" type="self" title="ALBA-2022-1875"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="adwaita-icon-theme-devel" version="3.28.0" release="3.el8" epoch="0" arch="noarch" src="adwaita-icon-theme-3.28.0-3.el8.src.rpm">
          <filename>adwaita-icon-theme-devel-3.28.0-3.el8.noarch.rpm</filename>
          <sum type="sha256">1fc1a30da3c854d5ced970d1c1db3592f27aed4bde1eeb32c8bd8faa6d0ae5ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1887</id>
    <title>bcc bug fix and enhancement update</title>
    <issued date="2022-05-10 08:06:33"/>
    <updated date="2022-05-10 08:06:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for bcc is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1887.html" id="ALBA-2022-1887" type="self" title="ALBA-2022-1887"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="bcc-doc" version="0.19.0" release="5.el8" epoch="0" arch="noarch" src="bcc-0.19.0-5.el8.src.rpm">
          <filename>bcc-doc-0.19.0-5.el8.noarch.rpm</filename>
          <sum type="sha256">6ad9e4f8633c85a47235cfc790548db4c599e133d3e13cab5be3970cb06e1333</sum>
        </package>
        <package name="bcc-devel" version="0.19.0" release="5.el8" epoch="0" arch="aarch64" src="bcc-0.19.0-5.el8.src.rpm">
          <filename>bcc-devel-0.19.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">9b67aed25f2617103f6c8de456406d89672f4a00915803263e1038316f278e7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1889</id>
    <title>texlive bug fix and enhancement update</title>
    <issued date="2022-05-10 08:06:38"/>
    <updated date="2022-05-10 08:06:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for texlive is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1889.html" id="ALBA-2022-1889" type="self" title="ALBA-2022-1889"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="texlive-lib-devel" version="20180414" release="25.el8" epoch="7" arch="aarch64" src="texlive-20180414-25.el8.src.rpm">
          <filename>texlive-lib-devel-20180414-25.el8.aarch64.rpm</filename>
          <sum type="sha256">c29237929f15a362e0632c91651ddfd49e36d4c2d810ff05ce97574c78c476a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1893</id>
    <title>libblockdev bug fix and enhancement update</title>
    <issued date="2022-05-10 06:36:22"/>
    <updated date="2022-05-10 08:06:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libblockdev is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1893.html" id="ALBA-2022-1893" type="self" title="ALBA-2022-1893"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libblockdev-swap-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-swap-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">52795844af9115bbcbe8ea8d64fb21889dda23261dc809a02f24dd1731b12172</sum>
        </package>
        <package name="libblockdev-vdo-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-vdo-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">6a42d96f635833a72cc77cffbae9fe5a20d2df39d972bb2cb42ad88b44dd2a07</sum>
        </package>
        <package name="libblockdev-loop-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-loop-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">6f5a5dace3830b0df2e38885af7bcc3c481a7b6d9c56bfadb86da4d2083407fe</sum>
        </package>
        <package name="libblockdev-utils-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-utils-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">87be9f4412bac1879885f5c41c6730899d331e53cd3877536607706cdb368dba</sum>
        </package>
        <package name="libblockdev-mdraid-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-mdraid-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">8f7f4f9a163c113a96eb1ab13ebd8b16f08e079968a17b1ae4f9b1a27e541ff0</sum>
        </package>
        <package name="libblockdev-lvm-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-lvm-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">9f16b1fcc8a69218bf4c35dfd2519789c9e093a38ebdc8880a0a9a6db8291fb0</sum>
        </package>
        <package name="libblockdev-part-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-part-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">a64c910b9589abbab2f15fb91e0fa94ab694db925ffbe6b9ce04d71d7cfd9bb2</sum>
        </package>
        <package name="libblockdev-fs-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-fs-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">ad6a02007b0d0452c5b4b30a4d95fbcd0e868f21f2de8ed0da1a84dfeb990829</sum>
        </package>
        <package name="libblockdev-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">db8fb28d51f6dff6e25f1d34ed896f1befab4dabe3d843e86e6489469905cf5e</sum>
        </package>
        <package name="libblockdev-crypto-devel" version="2.24" release="8.el8" epoch="0" arch="aarch64" src="libblockdev-2.24-8.el8.src.rpm">
          <filename>libblockdev-crypto-devel-2.24-8.el8.aarch64.rpm</filename>
          <sum type="sha256">eb86d032e8850a698dbf8e0f819d2aeda18471323f14fa7a3207cd00198d4763</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1895</id>
    <title>libecpg bug fix and enhancement update</title>
    <issued date="2022-05-10 06:36:26"/>
    <updated date="2022-05-10 08:06:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libecpg is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1895.html" id="ALBA-2022-1895" type="self" title="ALBA-2022-1895"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libecpg-devel" version="13.5" release="3.el8" epoch="0" arch="aarch64" src="libecpg-13.5-3.el8.src.rpm">
          <filename>libecpg-devel-13.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">9b9349299e0ec4b1ea8dca096f9266d6b263480a6e4001d8afc015f7a556d694</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1910</id>
    <title>dotnet6.0 bug fix and enhancement update</title>
    <issued date="2022-05-10 06:37:56"/>
    <updated date="2022-05-10 08:07:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for dotnet6.0 is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1910.html" id="ALBA-2022-1910" type="self" title="ALBA-2022-1910"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.103" release="5.el8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.103-5.el8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.103-5.el8.aarch64.rpm</filename>
          <sum type="sha256">fe30365ec0650adc14b358b021845ddd8b0531ce365e6f63e8c5292ca178e953</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1916</id>
    <title>qt5-qttools bug fix and enhancement update</title>
    <issued date="2022-05-10 06:38:24"/>
    <updated date="2022-05-10 08:07:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for qt5-qttools is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1916.html" id="ALBA-2022-1916" type="self" title="ALBA-2022-1916"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="qt5-qttools-static" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qttools-5.15.2-4.el8.src.rpm">
          <filename>qt5-qttools-static-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">708bc50a1a1794bd4f9655c505b08f71d2598f7a696077b0691184e881413a63</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1918</id>
    <title>webrtc-audio-processing bug fix and enhancement update</title>
    <issued date="2022-05-10 08:07:44"/>
    <updated date="2022-05-10 08:07:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for webrtc-audio-processing is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1918.html" id="ALBA-2022-1918" type="self" title="ALBA-2022-1918"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="webrtc-audio-processing-devel" version="0.3" release="10.el8" epoch="0" arch="aarch64" src="webrtc-audio-processing-0.3-10.el8.src.rpm">
          <filename>webrtc-audio-processing-devel-0.3-10.el8.aarch64.rpm</filename>
          <sum type="sha256">62b2c51ab01275585fdc51f92f7137d630ac099b41532ff0dfef5503c3947ed8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1924</id>
    <title>bind9.16 bug fix and enhancement update</title>
    <issued date="2022-05-10 08:07:53"/>
    <updated date="2022-05-10 08:07:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for bind9.16 is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1924.html" id="ALBA-2022-1924" type="self" title="ALBA-2022-1924"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.7.el8" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.7.el8.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.7.el8.aarch64.rpm</filename>
          <sum type="sha256">1f3b9b9f85eb60348122a8bf7a46a0040ad17d821d305ea0e37bfa2a75ec7ded</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.7.el8" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.7.el8.noarch.rpm</filename>
          <sum type="sha256">4047c6b7ac868d19b93fc1a4f8fcc87f9e87ffb495fc049cf7a406a10eb6be2b</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.7.el8" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.7.el8.noarch.rpm</filename>
          <sum type="sha256">96411d7448e2ac950fc6257033e3cc42caa945ce481f6e5ce9bae645df54ef6e</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.7.el8" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.7.el8.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.7.el8.aarch64.rpm</filename>
          <sum type="sha256">cfe5cbacfe2a1b7247f0f9f0d16e25393ff20b559e1191a9f1904919ebc133ee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1933</id>
    <title>qt5-qtwayland bug fix and enhancement update</title>
    <issued date="2022-05-10 06:39:31"/>
    <updated date="2022-05-10 08:08:19"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for qt5-qtwayland is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1933.html" id="ALBA-2022-1933" type="self" title="ALBA-2022-1933"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="qt5-qtwayland-devel" version="5.15.2" release="3.el8" epoch="0" arch="aarch64" src="qt5-qtwayland-5.15.2-3.el8.src.rpm">
          <filename>qt5-qtwayland-devel-5.15.2-3.el8.aarch64.rpm</filename>
          <sum type="sha256">fe8fd6deb0fb1510cccf20f14bd6b3a4eb8ceeab316bdeac002b4c6a850e2b35</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1944</id>
    <title>netpbm bug fix and enhancement update</title>
    <issued date="2022-05-10 08:08:49"/>
    <updated date="2022-05-10 08:08:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for netpbm is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1944.html" id="ALBA-2022-1944" type="self" title="ALBA-2022-1944"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="netpbm-doc" version="10.82.00" release="7.el8" epoch="0" arch="aarch64" src="netpbm-10.82.00-7.el8.src.rpm">
          <filename>netpbm-doc-10.82.00-7.el8.aarch64.rpm</filename>
          <sum type="sha256">427af591838b9d8754683215e30c8bc00e12e53821b7df8e662f8bcf1ab78d6d</sum>
        </package>
        <package name="netpbm-devel" version="10.82.00" release="7.el8" epoch="0" arch="aarch64" src="netpbm-10.82.00-7.el8.src.rpm">
          <filename>netpbm-devel-10.82.00-7.el8.aarch64.rpm</filename>
          <sum type="sha256">bdecda51a3855ef994db57b855f2096d42e133ddca7f35b809e8862412f24bfb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:1947</id>
    <title>mutter bug fix and enhancement update</title>
    <issued date="2022-05-10 06:40:29"/>
    <updated date="2022-05-10 08:08:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for mutter is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1947.html" id="ALBA-2022-1947" type="self" title="ALBA-2022-1947"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="mutter-devel" version="3.32.2" release="63.el8" epoch="0" arch="aarch64" src="mutter-3.32.2-63.el8.src.rpm">
          <filename>mutter-devel-3.32.2-63.el8.aarch64.rpm</filename>
          <sum type="sha256">bbf1bcb42951d9638ec01a75a9e064b33659ba248534b41c61b7c9fa85512dcf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1949</id>
    <title>python-pillow update</title>
    <issued date="2022-05-10 08:08:55"/>
    <updated date="2022-05-10 08:08:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>None</severity>
    <summary>An update for python-pillow is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1949.html" id="ALBA-2022-1949" type="self" title="ALBA-2022-1949"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="python3-pillow-tk" version="5.1.1" release="18.el8_5" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-tk-5.1.1-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">1d6a2627dcccb3628b027f7b5abc0d7b8920f705d9fd5ae5f9fd1c000a3246b1</sum>
        </package>
        <package name="python3-pillow-doc" version="5.1.1" release="18.el8_5" epoch="0" arch="noarch" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-doc-5.1.1-18.el8_5.noarch.rpm</filename>
          <sum type="sha256">77fcdc9fd93c5f375179289519ef43064b05c10f2143c390fd08af864328395b</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="18.el8_5" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-devel-5.1.1-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">fca3f1ed8832dc1865388f1847a18190d36c5ac8326b7f9c0cc46a122b88cfb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1958</id>
    <title>opencv bug fix and enhancement update</title>
    <issued date="2022-05-10 08:09:35"/>
    <updated date="2022-05-10 08:09:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for opencv is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1958.html" id="ALBA-2022-1958" type="self" title="ALBA-2022-1958"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="opencv" version="3.4.6" release="7.el8" epoch="0" arch="aarch64" src="opencv-3.4.6-7.el8.src.rpm">
          <filename>opencv-3.4.6-7.el8.aarch64.rpm</filename>
          <sum type="sha256">16d6ad51cb419cabdf62520797033e016d8b948fd4f6621709c67670bff9cda6</sum>
        </package>
        <package name="opencv-devel" version="3.4.6" release="7.el8" epoch="0" arch="aarch64" src="opencv-3.4.6-7.el8.src.rpm">
          <filename>opencv-devel-3.4.6-7.el8.aarch64.rpm</filename>
          <sum type="sha256">9a52830e2bc9383ec72c6ee2fb3a5d9d1815edca1548ac33e77e1c119ede1d57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:1993</id>
    <title>bash bug fix and enhancement update</title>
    <issued date="2022-05-10 08:11:57"/>
    <updated date="2022-05-10 08:11:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for bash is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-1993.html" id="ALBA-2022-1993" type="self" title="ALBA-2022-1993"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="bash-devel" version="4.4.20" release="3.el8" epoch="0" arch="aarch64" src="bash-4.4.20-3.el8.src.rpm">
          <filename>bash-devel-4.4.20-3.el8.aarch64.rpm</filename>
          <sum type="sha256">00278119828f31e525d058364bb899304d45d67fae1c3e8f8907fe4f057cf3ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2000</id>
    <title>glib2 bug fix and enhancement update</title>
    <issued date="2022-05-10 08:12:09"/>
    <updated date="2022-05-10 08:12:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for glib2 is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2000.html" id="ALBA-2022-2000" type="self" title="ALBA-2022-2000"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="glib2-doc" version="2.56.4" release="158.el8" epoch="0" arch="noarch" src="glib2-2.56.4-158.el8.src.rpm">
          <filename>glib2-doc-2.56.4-158.el8.noarch.rpm</filename>
          <sum type="sha256">3f66f30973e79358a938596c7d2e687ce26c13d7a6ad76f0241bfdace41b6b11</sum>
        </package>
        <package name="glib2-static" version="2.56.4" release="158.el8" epoch="0" arch="aarch64" src="glib2-2.56.4-158.el8.src.rpm">
          <filename>glib2-static-2.56.4-158.el8.aarch64.rpm</filename>
          <sum type="sha256">f1238ccd2b50b8024153d13c156d4d2951d57cbecdd0b1e906d2f7b57f98a1f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2004</id>
    <title>nftables bug fix and enhancement update</title>
    <issued date="2022-05-10 08:12:15"/>
    <updated date="2022-05-10 08:12:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for nftables is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2004.html" id="ALBA-2022-2004" type="self" title="ALBA-2022-2004"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="nftables-devel" version="0.9.3" release="25.el8" epoch="1" arch="aarch64" src="nftables-0.9.3-25.el8.src.rpm">
          <filename>nftables-devel-0.9.3-25.el8.aarch64.rpm</filename>
          <sum type="sha256">0803ae747549aad2d384b3b61ac2f438ad06c97c02ff6a806bed365d5b70db15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2005</id>
    <title>glibc bug fix and enhancement update</title>
    <issued date="2022-05-10 06:44:52"/>
    <updated date="2022-05-10 08:12:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for Moderate: glibc is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <reboot_suggested>True</reboot_suggested>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2005.html" id="ALBA-2022-2005" type="self" title="ALBA-2022-2005"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="glibc-static" version="2.28" release="189.1.el8" epoch="0" arch="aarch64" src="glibc-2.28-189.1.el8.src.rpm">
          <filename>glibc-static-2.28-189.1.el8.aarch64.rpm</filename>
          <sum type="sha256">559348967dade735135941ba2bbf2c71149bcc0a9dd561b0a61e04902dd230a7</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="189.1.el8" epoch="0" arch="aarch64" src="glibc-2.28-189.1.el8.src.rpm">
          <filename>glibc-benchtests-2.28-189.1.el8.aarch64.rpm</filename>
          <sum type="sha256">6a8adb3c4e69223c995f4248136dcce5cd4f0f895ec3b821469a9ce89b2303d7</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="189.1.el8" epoch="0" arch="aarch64" src="glibc-2.28-189.1.el8.src.rpm">
          <filename>nss_hesiod-2.28-189.1.el8.aarch64.rpm</filename>
          <sum type="sha256">6edd7e337f5744b0251f25716dca43f6ebd6c2045fd136d21564fc753c1f89ce</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="189.1.el8" epoch="0" arch="aarch64" src="glibc-2.28-189.1.el8.src.rpm">
          <filename>glibc-nss-devel-2.28-189.1.el8.aarch64.rpm</filename>
          <sum type="sha256">d9c9e8485fde8e54e4ca21ac57251adf1e7014958d42e010cec80936b4fe6352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2009</id>
    <title>ModemManager bug fix and enhancement update</title>
    <issued date="2022-05-10 08:12:55"/>
    <updated date="2022-05-10 08:12:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ModemManager is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2009.html" id="ALBA-2022-2009" type="self" title="ALBA-2022-2009"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ModemManager-devel" version="1.18.2" release="1.el8" epoch="0" arch="aarch64" src="ModemManager-1.18.2-1.el8.src.rpm">
          <filename>ModemManager-devel-1.18.2-1.el8.aarch64.rpm</filename>
          <sum type="sha256">3170a248d4570ca78efb09c191c733c16669258091c4a198a4453c835e070f80</sum>
        </package>
        <package name="ModemManager-glib-devel" version="1.18.2" release="1.el8" epoch="0" arch="aarch64" src="ModemManager-1.18.2-1.el8.src.rpm">
          <filename>ModemManager-glib-devel-1.18.2-1.el8.aarch64.rpm</filename>
          <sum type="sha256">7ace007247b7764cb132dbd84aaf0e912144609f9899da4fad7757fdc8865f43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2021</id>
    <title>shadow-utils bug fix and enhancement update</title>
    <issued date="2022-05-10 08:13:40"/>
    <updated date="2022-05-10 08:13:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for shadow-utils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2021.html" id="ALBA-2022-2021" type="self" title="ALBA-2022-2021"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="shadow-utils-subid-devel" version="4.6" release="16.el8" epoch="2" arch="aarch64" src="shadow-utils-4.6-16.el8.src.rpm">
          <filename>shadow-utils-subid-devel-4.6-16.el8.aarch64.rpm</filename>
          <sum type="sha256">18e0e38ec3924954022fac9f4170a75478ad2ceb3b4e06bb9a80f564c299aa29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2025</id>
    <title>nfs-utils bug fix and enhancement update</title>
    <issued date="2022-05-10 06:46:29"/>
    <updated date="2022-05-10 08:13:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for nfs-utils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2025.html" id="ALBA-2022-2025" type="self" title="ALBA-2022-2025"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libnfsidmap-devel" version="2.3.3" release="51.el8" epoch="1" arch="aarch64" src="nfs-utils-2.3.3-51.el8.src.rpm">
          <filename>libnfsidmap-devel-2.3.3-51.el8.aarch64.rpm</filename>
          <sum type="sha256">92ed74ab07ea682cc3fc415c2952947367e0f974a369bedc7b65c0689ad8a2da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2027</id>
    <title>json-c bug fix and enhancement update</title>
    <issued date="2022-05-10 06:46:43"/>
    <updated date="2022-05-10 08:14:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for json-c is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2027.html" id="ALBA-2022-2027" type="self" title="ALBA-2022-2027"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="json-c-doc" version="0.13.1" release="3.el8" epoch="0" arch="noarch" src="json-c-0.13.1-3.el8.src.rpm">
          <filename>json-c-doc-0.13.1-3.el8.noarch.rpm</filename>
          <sum type="sha256">55b42e619213e16cc7dbf046507ce3f099373af8fb7fea61088d1a200dbf9240</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2030</id>
    <title>opencryptoki bug fix and enhancement update</title>
    <issued date="2022-05-10 06:47:04"/>
    <updated date="2022-05-10 08:14:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for opencryptoki is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2030.html" id="ALBA-2022-2030" type="self" title="ALBA-2022-2030"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="opencryptoki-devel" version="3.17.0" release="3.el8" epoch="0" arch="aarch64" src="opencryptoki-3.17.0-3.el8.src.rpm">
          <filename>opencryptoki-devel-3.17.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f41f2f682cf2ea21ac9b14362deef5476517f6c5fafae27cfd015d5dd6b24cbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2035</id>
    <title>libstoragemgmt bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:11"/>
    <updated date="2022-05-10 08:14:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libstoragemgmt is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2035.html" id="ALBA-2022-2035" type="self" title="ALBA-2022-2035"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libstoragemgmt-devel" version="1.9.1" release="3.el8" epoch="0" arch="aarch64" src="libstoragemgmt-1.9.1-3.el8.src.rpm">
          <filename>libstoragemgmt-devel-1.9.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">0cda653eaed7eb63490f33c1a28c73a92b036a9d81a4a058b60d197dab9e7281</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2036</id>
    <title>device-mapper-multipath bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:11"/>
    <updated date="2022-05-10 08:14:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for device-mapper-multipath is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2036.html" id="ALBA-2022-2036" type="self" title="ALBA-2022-2036"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.4" release="22.el8" epoch="0" arch="aarch64" src="device-mapper-multipath-0.8.4-22.el8.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.4-22.el8.aarch64.rpm</filename>
          <sum type="sha256">d4020886d451b5aec207d0721031eea6886c258d77723bbf215568e808161683</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2038</id>
    <title>lvm2 bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:22"/>
    <updated date="2022-05-10 08:14:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for lvm2 is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2038.html" id="ALBA-2022-2038" type="self" title="ALBA-2022-2038"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="lvm2-devel" version="2.03.14" release="3.el8" epoch="8" arch="aarch64" src="lvm2-2.03.14-3.el8.src.rpm">
          <filename>lvm2-devel-2.03.14-3.el8.aarch64.rpm</filename>
          <sum type="sha256">9be7e7af1c1b7ef0fef9e559391181349627278d7d1da9535757e03c3f85c34f</sum>
        </package>
        <package name="device-mapper-event-devel" version="1.02.181" release="3.el8" epoch="8" arch="aarch64" src="lvm2-2.03.14-3.el8.src.rpm">
          <filename>device-mapper-event-devel-1.02.181-3.el8.aarch64.rpm</filename>
          <sum type="sha256">a8b881a8fb821e8c97d5b44bc9a3425dcd3f697c393f25f7785d97444627aba2</sum>
        </package>
        <package name="device-mapper-devel" version="1.02.181" release="3.el8" epoch="8" arch="aarch64" src="lvm2-2.03.14-3.el8.src.rpm">
          <filename>device-mapper-devel-1.02.181-3.el8.aarch64.rpm</filename>
          <sum type="sha256">fdc7402252329bff956c499c1bdcac3ffad831e0342f42fb557cf019394c9dde</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2039</id>
    <title>libbpf bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:24"/>
    <updated date="2022-05-10 08:14:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libbpf is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2039.html" id="ALBA-2022-2039" type="self" title="ALBA-2022-2039"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libbpf-devel" version="0.4.0" release="3.el8" epoch="0" arch="aarch64" src="libbpf-0.4.0-3.el8.src.rpm">
          <filename>libbpf-devel-0.4.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">4e8d33a7e8e457b43d416311d02326d3e6f405c1c89405976745c60476d0d298</sum>
        </package>
        <package name="libbpf-static" version="0.4.0" release="3.el8" epoch="0" arch="aarch64" src="libbpf-0.4.0-3.el8.src.rpm">
          <filename>libbpf-static-0.4.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">fcb146d50a9d223a7b0243ecc976766411180f08feac3324c7a2b3f6e48be7ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2045</id>
    <title>librepo bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:32"/>
    <updated date="2022-05-10 08:14:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for librepo is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2045.html" id="ALBA-2022-2045" type="self" title="ALBA-2022-2045"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="librepo-devel" version="1.14.2" release="1.el8" epoch="0" arch="aarch64" src="librepo-1.14.2-1.el8.src.rpm">
          <filename>librepo-devel-1.14.2-1.el8.aarch64.rpm</filename>
          <sum type="sha256">dc50a38d382ae2ba017d632d8d14183239618bc0600e279bc838dfb33e13bba0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2046</id>
    <title>libcomps bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:32"/>
    <updated date="2022-05-10 08:14:32"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libcomps is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2046.html" id="ALBA-2022-2046" type="self" title="ALBA-2022-2046"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libcomps-devel" version="0.1.18" release="1.el8" epoch="0" arch="aarch64" src="libcomps-0.1.18-1.el8.src.rpm">
          <filename>libcomps-devel-0.1.18-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e846dfaaa1df1947a90d9850e9b6ce0050db465e61e103c2b88a6655b4300ae4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2048</id>
    <title>libdnf bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:35"/>
    <updated date="2022-05-10 08:14:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libdnf is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2048.html" id="ALBA-2022-2048" type="self" title="ALBA-2022-2048"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libdnf-devel" version="0.63.0" release="8.el8.alma" epoch="0" arch="aarch64" src="libdnf-0.63.0-8.el8.alma.src.rpm">
          <filename>libdnf-devel-0.63.0-8.el8.alma.aarch64.rpm</filename>
          <sum type="sha256">058dacd611d4ad8a685db1f574a0af705710f74a385ae7f188a7b14420cbe096</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2049</id>
    <title>iproute bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:37"/>
    <updated date="2022-05-10 08:14:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for iproute is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2049.html" id="ALBA-2022-2049" type="self" title="ALBA-2022-2049"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="iproute-devel" version="5.15.0" release="4.el8" epoch="0" arch="aarch64" src="iproute-5.15.0-4.el8.src.rpm">
          <filename>iproute-devel-5.15.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">c3b56a7f61ee30042a7cb084339f19a5b065d5212c544c286f918c697a5ac94d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2050</id>
    <title>libsolv bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:45"/>
    <updated date="2022-05-10 08:14:37"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libsolv is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2050.html" id="ALBA-2022-2050" type="self" title="ALBA-2022-2050"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsolv-devel" version="0.7.20" release="1.el8" epoch="0" arch="aarch64" src="libsolv-0.7.20-1.el8.src.rpm">
          <filename>libsolv-devel-0.7.20-1.el8.aarch64.rpm</filename>
          <sum type="sha256">57890cf4717f33abc89db9417f09ee24e806683eddde995fd7b359ae6fae94cd</sum>
        </package>
        <package name="libsolv-tools" version="0.7.20" release="1.el8" epoch="0" arch="aarch64" src="libsolv-0.7.20-1.el8.src.rpm">
          <filename>libsolv-tools-0.7.20-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ac4c410c5144e4aa28208ec236a1d04536bd7dabbb13a1e18bca82d57190dd74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2055</id>
    <title>elfutils bug fix and enhancement update</title>
    <issued date="2022-05-10 06:49:46"/>
    <updated date="2022-05-10 08:14:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for elfutils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2055.html" id="ALBA-2022-2055" type="self" title="ALBA-2022-2055"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="elfutils-devel-static" version="0.186" release="1.el8" epoch="0" arch="aarch64" src="elfutils-0.186-1.el8.src.rpm">
          <filename>elfutils-devel-static-0.186-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2516ddf8e509277181d7020c95f14e3c7010af77485e6e1588ea9f5b5d50d2db</sum>
        </package>
        <package name="elfutils-libelf-devel-static" version="0.186" release="1.el8" epoch="0" arch="aarch64" src="elfutils-0.186-1.el8.src.rpm">
          <filename>elfutils-libelf-devel-static-0.186-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b0db571bb458973aba549f2c238bf2b2bcf95a69e2bc8a475f9e3a5a54f0ed10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2056</id>
    <title>fwupd bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:52"/>
    <updated date="2022-05-10 08:14:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for fwupd is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2056.html" id="ALBA-2022-2056" type="self" title="ALBA-2022-2056"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="fwupd-devel" version="1.7.4" release="2.el8.alma" epoch="0" arch="aarch64" src="fwupd-1.7.4-2.el8.alma.src.rpm">
          <filename>fwupd-devel-1.7.4-2.el8.alma.aarch64.rpm</filename>
          <sum type="sha256">d3bae8ceb53319d0f2e60278e4ee6cf8836791f3b3b5545d29c8b17598ec3dee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2058</id>
    <title>ndctl bug fix and enhancement update</title>
    <issued date="2022-05-10 08:14:54"/>
    <updated date="2022-05-10 08:14:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ndctl is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2058.html" id="ALBA-2022-2058" type="self" title="ALBA-2022-2058"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="daxctl-devel" version="71.1" release="3.el8" epoch="0" arch="aarch64" src="ndctl-71.1-3.el8.src.rpm">
          <filename>daxctl-devel-71.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">7874a3f8eb6dc3f5e2f97a9138e913585254d1822fd625f7a13af9840fc06ae2</sum>
        </package>
        <package name="ndctl-devel" version="71.1" release="3.el8" epoch="0" arch="aarch64" src="ndctl-71.1-3.el8.src.rpm">
          <filename>ndctl-devel-71.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e479f85b946a351505714c50b1f19a2aba2a387d8a1bf476f4055a86d49a0672</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2060</id>
    <title>kmod bug fix and enhancement update</title>
    <issued date="2022-05-10 06:50:10"/>
    <updated date="2022-05-10 08:14:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for kmod is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2060.html" id="ALBA-2022-2060" type="self" title="ALBA-2022-2060"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="kmod-devel" version="25" release="19.el8" epoch="0" arch="aarch64" src="kmod-25-19.el8.src.rpm">
          <filename>kmod-devel-25-19.el8.aarch64.rpm</filename>
          <sum type="sha256">1b949bb00733d021379e8f4e293dfb4cfe08efbc7ddf1b46aaeb4dcfb34da9ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2070</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2022-05-10 08:15:15"/>
    <updated date="2022-05-10 08:15:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for sssd is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2070.html" id="ALBA-2022-2070" type="self" title="ALBA-2022-2070"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsss_nss_idmap-devel" version="2.6.2" release="3.el8" epoch="0" arch="aarch64" src="sssd-2.6.2-3.el8.src.rpm">
          <filename>libsss_nss_idmap-devel-2.6.2-3.el8.aarch64.rpm</filename>
          <sum type="sha256">a0751cb2558ec2701100eb3ff1982f25f5bbaabf391f9bc8469e224652a4edaa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2072</id>
    <title>gcc bug fix and enhancement update</title>
    <issued date="2022-05-10 08:15:18"/>
    <updated date="2022-05-10 08:15:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for gcc is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2072.html" id="ALBA-2022-2072" type="self" title="ALBA-2022-2072"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libstdc++-static" version="8.5.0" release="10.el8.alma" epoch="0" arch="aarch64" src="gcc-8.5.0-10.el8.alma.src.rpm">
          <filename>libstdc++-static-8.5.0-10.el8.alma.aarch64.rpm</filename>
          <sum type="sha256">c300315f4f49989669cf196d39c2e58bc8bbf08f2260177912bbb4140ee38a3a</sum>
        </package>
        <package name="gcc-plugin-devel" version="8.5.0" release="10.el8.alma" epoch="0" arch="aarch64" src="gcc-8.5.0-10.el8.alma.src.rpm">
          <filename>gcc-plugin-devel-8.5.0-10.el8.alma.aarch64.rpm</filename>
          <sum type="sha256">fbe83317c1df37872a4a98768ed9d421b1d4d01df462ece146fb610a65abcccb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2089</id>
    <title>pcsc-lite bug fix and enhancement update</title>
    <issued date="2022-05-10 08:16:28"/>
    <updated date="2022-05-10 08:16:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for pcsc-lite is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2089.html" id="ALBA-2022-2089" type="self" title="ALBA-2022-2089"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="pcsc-lite-devel" version="1.9.5" release="1.el8" epoch="0" arch="aarch64" src="pcsc-lite-1.9.5-1.el8.src.rpm">
          <filename>pcsc-lite-devel-1.9.5-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4cc3efc24d125c50318cfe2e6bfbcb36a714224cca459d93321c256799cef8b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2099</id>
    <title>sysfsutils bug fix and enhancement update</title>
    <issued date="2022-05-10 08:16:42"/>
    <updated date="2022-05-10 08:16:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for sysfsutils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2099.html" id="ALBA-2022-2099" type="self" title="ALBA-2022-2099"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsysfs-devel" version="2.1.0" release="25.el8" epoch="0" arch="aarch64" src="sysfsutils-2.1.0-25.el8.src.rpm">
          <filename>libsysfs-devel-2.1.0-25.el8.aarch64.rpm</filename>
          <sum type="sha256">8affd3aee422b702560d0296e717b914fddd62da10a477b49ff6a75142004ab5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2100</id>
    <title>util-linux bug fix and enhancement update</title>
    <issued date="2022-05-10 08:16:43"/>
    <updated date="2022-05-10 08:16:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for util-linux is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2100.html" id="ALBA-2022-2100" type="self" title="ALBA-2022-2100"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libmount-devel" version="2.32.1" release="35.el8" epoch="0" arch="aarch64" src="util-linux-2.32.1-35.el8.src.rpm">
          <filename>libmount-devel-2.32.1-35.el8.aarch64.rpm</filename>
          <sum type="sha256">9457e195648c49c387e6d4cc2cf91e02a31249fce492a1c96c232e6d6eea65cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2101</id>
    <title>libnftnl bug fix and enhancement update</title>
    <issued date="2022-05-10 08:16:46"/>
    <updated date="2022-05-10 08:16:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libnftnl is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2101.html" id="ALBA-2022-2101" type="self" title="ALBA-2022-2101"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libnftnl-devel" version="1.1.5" release="5.el8" epoch="0" arch="aarch64" src="libnftnl-1.1.5-5.el8.src.rpm">
          <filename>libnftnl-devel-1.1.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">04497780c113d129e07f38a823abc01ad4e021371fb2cf70f0aea65a72497e98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="3">
    <id>ALBA-2022:2104</id>
    <title>e2fsprogs bug fix and enhancement update</title>
    <issued date="2022-05-10 06:54:37"/>
    <updated date="2022-05-10 08:16:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for e2fsprogs is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2104.html" id="ALBA-2022-2104" type="self" title="ALBA-2022-2104"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libss-devel" version="1.45.6" release="4.el8" epoch="0" arch="aarch64" src="e2fsprogs-1.45.6-4.el8.src.rpm">
          <filename>libss-devel-1.45.6-4.el8.aarch64.rpm</filename>
          <sum type="sha256">2ca57fd1f2cfb0e707d6ff18bf8e632420baf20a2f17e8d441085b4e742635fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2117</id>
    <title>gpgme bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:33"/>
    <updated date="2022-05-10 08:18:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for gpgme is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2117.html" id="ALBA-2022-2117" type="self" title="ALBA-2022-2117"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gpgmepp-devel" version="1.13.1" release="11.el8" epoch="0" arch="aarch64" src="gpgme-1.13.1-11.el8.src.rpm">
          <filename>gpgmepp-devel-1.13.1-11.el8.aarch64.rpm</filename>
          <sum type="sha256">02233f8205a76ffea0934fd66d5f47a4db36bb80f8ced88d96817ae75d5c40a6</sum>
        </package>
        <package name="gpgme-devel" version="1.13.1" release="11.el8" epoch="0" arch="aarch64" src="gpgme-1.13.1-11.el8.src.rpm">
          <filename>gpgme-devel-1.13.1-11.el8.aarch64.rpm</filename>
          <sum type="sha256">8ac8b0b54361c8f419d132240fc3d1307172f1a9a688f484ef0475bb808e8be7</sum>
        </package>
        <package name="qgpgme-devel" version="1.13.1" release="11.el8" epoch="0" arch="aarch64" src="gpgme-1.13.1-11.el8.src.rpm">
          <filename>qgpgme-devel-1.13.1-11.el8.aarch64.rpm</filename>
          <sum type="sha256">e621c7272d0f96a2f0d0452a2d32ab0b467a332c0d1e76b49de5bc03913f1b91</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2118</id>
    <title>texinfo bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:34"/>
    <updated date="2022-05-10 08:18:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for texinfo is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2118.html" id="ALBA-2022-2118" type="self" title="ALBA-2022-2118"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="texinfo-tex" version="6.5" release="7.el8" epoch="0" arch="aarch64" src="texinfo-6.5-7.el8.src.rpm">
          <filename>texinfo-tex-6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">5fd16a9ce88f10c80ac8cb1e3859b5d2caea49a7a59e8e88a3b03acc02df6c71</sum>
        </package>
        <package name="texinfo" version="6.5" release="7.el8" epoch="0" arch="aarch64" src="texinfo-6.5-7.el8.src.rpm">
          <filename>texinfo-6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">9521c1071aad3b8e2a33f0046e89fb82e317ddd9a69f364663651da3d807a47f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2119</id>
    <title>libsemanage bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:35"/>
    <updated date="2022-05-10 08:18:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libsemanage is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2119.html" id="ALBA-2022-2119" type="self" title="ALBA-2022-2119"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsemanage-devel" version="2.9" release="8.el8" epoch="0" arch="aarch64" src="libsemanage-2.9-8.el8.src.rpm">
          <filename>libsemanage-devel-2.9-8.el8.aarch64.rpm</filename>
          <sum type="sha256">7568b37b82114f493ceca35cd06ab194bbd25aaa96f3f15fe09865a1f39d3a5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2124</id>
    <title>xmlrpc-c bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:51"/>
    <updated date="2022-05-10 08:18:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for xmlrpc-c is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2124.html" id="ALBA-2022-2124" type="self" title="ALBA-2022-2124"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="xmlrpc-c-c++" version="1.51.0" release="6.el8" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-6.el8.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">64b5fa9aee21e147a0bc447112a0b73b40a1b562481ca10a36404b20a6a25d49</sum>
        </package>
        <package name="xmlrpc-c-devel" version="1.51.0" release="6.el8" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-6.el8.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">97ea81bccbfbfbbb70a79d0cf958dc88b53e3e2c8b7257f0dd9dafcfd69b0137</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="6.el8" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-6.el8.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">e5ee1d8ed6d60eddef75156a71c5b8a7bfe948e05dae6468e554e93c501e1ea9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2125</id>
    <title>sanlock bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:52"/>
    <updated date="2022-05-10 08:18:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for sanlock is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2125.html" id="ALBA-2022-2125" type="self" title="ALBA-2022-2125"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="sanlock-devel" version="3.8.4" release="3.el8" epoch="0" arch="aarch64" src="sanlock-3.8.4-3.el8.src.rpm">
          <filename>sanlock-devel-3.8.4-3.el8.aarch64.rpm</filename>
          <sum type="sha256">3853967f2ff79c7c07260b1546c3a435650b543fad287149fde3d530a5dcc43e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2127</id>
    <title>kronosnet bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:55"/>
    <updated date="2022-05-10 08:18:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for kronosnet is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2127.html" id="ALBA-2022-2127" type="self" title="ALBA-2022-2127"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libknet1" version="1.22" release="1.el8" epoch="0" arch="aarch64" src="kronosnet-1.22-1.el8.src.rpm">
          <filename>libknet1-1.22-1.el8.aarch64.rpm</filename>
          <sum type="sha256">03b58e84e03b2187e7cb4fec50125fa9188de938dd92cab9c3f28fed7e3e1744</sum>
        </package>
        <package name="libknet1-devel" version="1.22" release="1.el8" epoch="0" arch="aarch64" src="kronosnet-1.22-1.el8.src.rpm">
          <filename>libknet1-devel-1.22-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f41bb6f723a2df5a584939b8d3dd139ce07ed3241753fcdc244dddaf435b5b76</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2128</id>
    <title>dwarves bug fix and enhancement update</title>
    <issued date="2022-05-10 08:18:57"/>
    <updated date="2022-05-10 08:18:55"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for dwarves is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2128.html" id="ALBA-2022-2128" type="self" title="ALBA-2022-2128"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libdwarves1" version="1.22" release="1.el8" epoch="0" arch="aarch64" src="dwarves-1.22-1.el8.src.rpm">
          <filename>libdwarves1-1.22-1.el8.aarch64.rpm</filename>
          <sum type="sha256">43cfefe5739683bd59aafa7336b09632366375090eb296c0e96234493691f456</sum>
        </package>
        <package name="dwarves" version="1.22" release="1.el8" epoch="0" arch="aarch64" src="dwarves-1.22-1.el8.src.rpm">
          <filename>dwarves-1.22-1.el8.aarch64.rpm</filename>
          <sum type="sha256">a2542e46912475fe838161ed8af202dca233d7be32dd1ed553492195d06f7e27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2130</id>
    <title>meson bug fix and enhancement update</title>
    <issued date="2022-05-10 08:19:14"/>
    <updated date="2022-05-10 08:19:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for meson is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2130.html" id="ALBA-2022-2130" type="self" title="ALBA-2022-2130"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="meson" version="0.58.2" release="2.el8" epoch="0" arch="noarch" src="meson-0.58.2-2.el8.src.rpm">
          <filename>meson-0.58.2-2.el8.noarch.rpm</filename>
          <sum type="sha256">66720e976a1402af333c354e8829284017b344a416817f432bb6eb2f53b2e98f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="4">
    <id>ALBA-2022:2131</id>
    <title>scons bug fix and enhancement update</title>
    <issued date="2022-05-10 06:57:47"/>
    <updated date="2022-05-10 08:19:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for scons is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2131.html" id="ALBA-2022-2131" type="self" title="ALBA-2022-2131"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="python3-scons" version="3.1.2" release="1.el8" epoch="0" arch="noarch" src="scons-3.1.2-1.el8.src.rpm">
          <filename>python3-scons-3.1.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">5abb547d383ffb4120632dfbc6626fd2ab6625b640a04188a4f3cdbf118fa189</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="bugfix" version="1">
    <id>ALBA-2022:2147</id>
    <title>sssd bug fix and enhancement update</title>
    <issued date="2022-05-10 15:00:03"/>
    <updated date="2022-05-10 14:59:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for sssd is now available for AlmaLinux</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of
daemons to manage access to remote directories and authentication
mechanisms. It also provides the Name Service Switch (NSS) and the
Pluggable Authentication Modules (PAM) interfaces toward the system, and a
pluggable back-end system to connect to multiple different account sources.

Bug Fix(es) and Enhancement(s):

* sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop (BZ#2074648)</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALBA-2022-2147.html" id="ALBA-2022-2147" type="self" title="ALBA-2022-2147"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsss_nss_idmap-devel" version="2.6.2" release="4.el8_6" epoch="0" arch="aarch64" src="sssd-2.6.2-4.el8_6.src.rpm">
          <filename>libsss_nss_idmap-devel-2.6.2-4.el8_6.aarch64.rpm</filename>
          <sum type="sha256">303491943c2ce21c63a6672822106b582f19a1e6428b6be58a13d26f5d2e36f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2019:3367</id>
    <title>google-noto-cjk-fonts bug fix and enhancement update</title>
    <issued date="2019-11-05 17:36:23"/>
    <updated date="2019-11-05 17:36:16"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for google-noto-cjk-fonts is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2019-3367.html" id="ALEA-2019-3367" type="self" title="ALEA-2019-3367"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="google-noto-sans-cjk-jp-fonts" version="20190416" release="1.el8" epoch="0" arch="noarch" src="google-noto-cjk-fonts-20190416-1.el8.src.rpm">
          <filename>google-noto-sans-cjk-jp-fonts-20190416-1.el8.noarch.rpm</filename>
          <sum type="sha256">37a294a727c0912434ebb0f2e7824b2471e5f2e8aefc88f1d10dacfa326849ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2019:3511</id>
    <title>libvarlink bug fix and enhancement update</title>
    <issued date="2019-11-05 17:53:58"/>
    <updated date="2019-11-05 17:53:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>None</severity>
    <summary>An update for libvarlink is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2019-3511.html" id="ALEA-2019-3511" type="self" title="ALEA-2019-3511"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libvarlink-devel" version="18" release="3.el8" epoch="0" arch="aarch64" src="libvarlink-18-3.el8.src.rpm">
          <filename>libvarlink-devel-18-3.el8.aarch64.rpm</filename>
          <sum type="sha256">80e09deb8df9b38622df9cb73af1931df873aea2c69215c8d3bf7603143986b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2019:3557</id>
    <title>libtalloc bug fix and enhancement update</title>
    <issued date="2019-11-05 18:00:30"/>
    <updated date="2019-11-05 18:00:21"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libtalloc is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2019-3557.html" id="ALEA-2019-3557" type="self" title="ALEA-2019-3557"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libcmocka-devel" version="1.1.5" release="1.el8" epoch="0" arch="aarch64" src="cmocka-1.1.5-1.el8.src.rpm">
          <filename>libcmocka-devel-1.1.5-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2d3ad5e4b9b8852d9b9dc297d317868faa8809cd9e65ce0e3abe7754ce6e8019</sum>
        </package>
        <package name="uid_wrapper" version="1.2.4" release="4.el8" epoch="0" arch="aarch64" src="uid_wrapper-1.2.4-4.el8.src.rpm">
          <filename>uid_wrapper-1.2.4-4.el8.aarch64.rpm</filename>
          <sum type="sha256">6d1d4aa430709c052c14182c739b2d9e56cc33325e20f980096f40b726995698</sum>
        </package>
        <package name="libcmocka" version="1.1.5" release="1.el8" epoch="0" arch="aarch64" src="cmocka-1.1.5-1.el8.src.rpm">
          <filename>libcmocka-1.1.5-1.el8.aarch64.rpm</filename>
          <sum type="sha256">d38d046a4f77d43aafb8c9f4d16b1f8cf3eb32230bd51ad2d727608a493a83d2</sum>
        </package>
        <package name="socket_wrapper" version="1.2.3" release="1.el8" epoch="0" arch="aarch64" src="socket_wrapper-1.2.3-1.el8.src.rpm">
          <filename>socket_wrapper-1.2.3-1.el8.aarch64.rpm</filename>
          <sum type="sha256">dd9d09d3590f1ea7192caf01f89db789d7be58955145a1b4a26c5917f16235d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2019:3585</id>
    <title>rdma bug fix and enhancement update</title>
    <issued date="2019-11-05 18:04:14"/>
    <updated date="2019-11-05 18:04:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for rdma is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2019-3585.html" id="ALEA-2019-3585" type="self" title="ALEA-2019-3585"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="infiniband-diags-compat" version="2.2.0" release="3.el8" epoch="0" arch="aarch64" src="infiniband-diags-2.2.0-3.el8.src.rpm">
          <filename>infiniband-diags-compat-2.2.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">1f11870f5ee3452b80358750c8d445581559722cc85168f96b43eabad56d8c3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2020:1607</id>
    <title>http-parser bug fix and enhancement update</title>
    <issued date="2020-04-28 08:56:06"/>
    <updated date="2020-04-28 08:56:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for http-parser is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-1607.html" id="ALEA-2020-1607" type="self" title="ALEA-2020-1607"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="http-parser-devel" version="2.8.0" release="9.el8" epoch="0" arch="aarch64" src="http-parser-2.8.0-9.el8.src.rpm">
          <filename>http-parser-devel-2.8.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">7bbf3dd1dbd73e2545c976260a6d01e2f0dec1ab616eefb1622f0c3b458199a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2020:1611</id>
    <title>input stack bug fix and enhancement update</title>
    <issued date="2020-04-28 08:56:25"/>
    <updated date="2020-04-28 08:56:19"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for libevdev, libinput, libwacom, libxkbcommon, and xkeyboard-config is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-1611.html" id="ALEA-2020-1611" type="self" title="ALEA-2020-1611"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libxkbcommon-x11-devel" version="0.9.1" release="1.el8" epoch="0" arch="aarch64" src="libxkbcommon-0.9.1-1.el8.src.rpm">
          <filename>libxkbcommon-x11-devel-0.9.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">5ab1b9d010206bc06e25306cb67068f131977c777c24963c4403bc1edc12cada</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2020:1694</id>
    <title>new module: python38:3.8</title>
    <issued date="2020-04-28 09:05:55"/>
    <updated date="2020-04-28 09:05:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>A new python38:3.8 module is now available for AlmaLinux</summary>
    <description>This enhancement update adds the python38:3.8 module to AlmaLinux (BZ#1747329)

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-1694.html" id="ALEA-2020-1694" type="self" title="ALEA-2020-1694"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel</name>
        <module name="python38-devel" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4555</id>
    <title>libpsl bug fix and enhancement update</title>
    <issued date="2020-11-03 12:15:27"/>
    <updated date="2020-11-03 19:39:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libpsl is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4555.html" id="ALEA-2020-4555" type="self" title="ALEA-2020-4555"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libpsl-devel" version="0.20.2" release="6.el8" epoch="0" arch="aarch64" src="libpsl-0.20.2-6.el8.src.rpm">
          <filename>libpsl-devel-0.20.2-6.el8.aarch64.rpm</filename>
          <sum type="sha256">38f02cf38ea34e3fbb1c977c9d30c68c402802b6f78ad8a7ef0ad224ad0dd1df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4556</id>
    <title>libnetfilter_queue bug fix and enhancement update</title>
    <issued date="2020-11-03 12:15:31"/>
    <updated date="2020-11-03 19:39:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libnetfilter_queue is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4556.html" id="ALEA-2020-4556" type="self" title="ALEA-2020-4556"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libnetfilter_queue-devel" version="1.0.4" release="3.el8" epoch="0" arch="aarch64" src="libnetfilter_queue-1.0.4-3.el8.src.rpm">
          <filename>libnetfilter_queue-devel-1.0.4-3.el8.aarch64.rpm</filename>
          <sum type="sha256">16af817081edcd195da4344915301f63228cbe8e6497cb163667632edbe84da3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4672</id>
    <title>autogen bug fix and enhancement update</title>
    <issued date="2020-11-03 12:25:46"/>
    <updated date="2020-11-03 19:48:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for autogen is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4672.html" id="ALEA-2020-4672" type="self" title="ALEA-2020-4672"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="autogen" version="5.18.12" release="8.el8" epoch="0" arch="aarch64" src="autogen-5.18.12-8.el8.src.rpm">
          <filename>autogen-5.18.12-8.el8.aarch64.rpm</filename>
          <sum type="sha256">0679d069f1e4944a9017bd35e7ed44cd77f8f6b90025e452d9c6bcb4d8f5d81c</sum>
        </package>
        <package name="autogen-libopts-devel" version="5.18.12" release="8.el8" epoch="0" arch="aarch64" src="autogen-5.18.12-8.el8.src.rpm">
          <filename>autogen-libopts-devel-5.18.12-8.el8.aarch64.rpm</filename>
          <sum type="sha256">3989c8c5f4586994b5c58d022d1d6a25186077524e4a1e1feefe3cd1be7afc57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4700</id>
    <title>createrepo_c bug fix and enhancement update</title>
    <issued date="2020-11-03 12:28:21"/>
    <updated date="2020-11-03 19:51:05"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for createrepo_c is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4700.html" id="ALEA-2020-4700" type="self" title="ALEA-2020-4700"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="drpm-devel" version="0.4.1" release="3.el8" epoch="0" arch="aarch64" src="drpm-0.4.1-3.el8.src.rpm">
          <filename>drpm-devel-0.4.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">3a23855d2a5f2b0699462f2722a185ed09d3a9c954bf9c40dd45f6c8ad26b86d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4731</id>
    <title>boost bug fix and enhancement update</title>
    <issued date="2020-11-03 12:31:25"/>
    <updated date="2020-11-03 19:53:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for boost is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4731.html" id="ALEA-2020-4731" type="self" title="ALEA-2020-4731"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="boost-mpich-python3" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-mpich-python3-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">1f017ee146517d382b4747a648af10212e81986161982f51bcc0267b178d8729</sum>
        </package>
        <package name="boost-numpy3" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-numpy3-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">20b471870e4519e227d5394da4e8667bdd7024f65d98477b8871899782e72c95</sum>
        </package>
        <package name="boost-python3-devel" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-python3-devel-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">20ecf1155874881ba64edf6f13e7b351f60f31ba059afef398fd4b1573592d7c</sum>
        </package>
        <package name="boost-examples" version="1.66.0" release="10.el8" epoch="0" arch="noarch" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-examples-1.66.0-10.el8.noarch.rpm</filename>
          <sum type="sha256">3a66fca0c712256ed97ec6f22f57c82267c95a6653a9d97f7d060339649f5fb6</sum>
        </package>
        <package name="boost-openmpi" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-openmpi-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">3fc9f501ca1504b6c6273db5495b825feb4b38ceb29d9045ff477fd069148e69</sum>
        </package>
        <package name="boost-jam" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-jam-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">49c3547ea8832e47e82661fe7496e22b0e630300a04e04c0ea6767aa5f7c5027</sum>
        </package>
        <package name="boost-doc" version="1.66.0" release="10.el8" epoch="0" arch="noarch" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-doc-1.66.0-10.el8.noarch.rpm</filename>
          <sum type="sha256">4af7c433493c258cdbd928c255e5d0b4e51d581664ac8fb7747e4e153108428a</sum>
        </package>
        <package name="boost-static" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-static-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">5f68e679b3c8e710f88f524891be7bf6f1185fbeaa878f5a4442c558b9267197</sum>
        </package>
        <package name="boost-mpich-devel" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-mpich-devel-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">6fafa13828a49d18b26b8dc4674c7e21a11299060a6a38646886a9e1ceaffe38</sum>
        </package>
        <package name="boost-openmpi-devel" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-openmpi-devel-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">703157324b00196275a9598bcc24159d3051f4925f2adcdfe61190e2c1751b1b</sum>
        </package>
        <package name="boost-build" version="1.66.0" release="10.el8" epoch="0" arch="noarch" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-build-1.66.0-10.el8.noarch.rpm</filename>
          <sum type="sha256">84904dd56dc4c00b16df71a0b2f6ec303cd8cf5ee503fdd8500bc84a3c9c5d69</sum>
        </package>
        <package name="boost-mpich" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-mpich-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">93dc9c9c41645049ce34dca936d96a9d99022677c65fd0487ae577057fc22844</sum>
        </package>
        <package name="boost-graph-openmpi" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-graph-openmpi-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">b5a253b31f15c4cd2ecab831e177ff61069269a6ccfd26544c5b6ba4017011c8</sum>
        </package>
        <package name="boost-python3" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-python3-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">cb685c9beac0af18110951f199861011cc98a2f7300c5a9e154247a99c386b7d</sum>
        </package>
        <package name="boost-graph-mpich" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-graph-mpich-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">f044a0c2ffe80fc9f431f0f141a714a3954054285862524f6b6b8f7448094277</sum>
        </package>
        <package name="boost-openmpi-python3" version="1.66.0" release="10.el8" epoch="0" arch="aarch64" src="boost-1.66.0-10.el8.src.rpm">
          <filename>boost-openmpi-python3-1.66.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">fa4127e61bb0a549270e8c0a0153b88588536e52facfdc2fe504306775de3802</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4742</id>
    <title>userspace graphics, xorg-x11, and mesa bug fix and enhancement update</title>
    <issued date="2020-11-03 12:32:11"/>
    <updated date="2020-11-03 19:54:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>None</severity>
    <summary>An update for the userspace graphics, including X.Org, and Mesa is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4742.html" id="ALEA-2020-4742" type="self" title="ALEA-2020-4742"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libxkbfile-devel" version="1.1.0" release="1.el8" epoch="0" arch="aarch64" src="libxkbfile-1.1.0-1.el8.src.rpm">
          <filename>libxkbfile-devel-1.1.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">06d81de39d7b991658935f598dcf45b3953dc94c4774911049d3db5d8fa71330</sum>
        </package>
        <package name="libvdpau-devel" version="1.4" release="2.el8" epoch="0" arch="aarch64" src="libvdpau-1.4-2.el8.src.rpm">
          <filename>libvdpau-devel-1.4-2.el8.aarch64.rpm</filename>
          <sum type="sha256">369420ee520ff0592440bbdcf18ffd2403d85845a85ce424e06e2580f4bbf030</sum>
        </package>
        <package name="xorg-x11-util-macros" version="1.19.2" release="1.el8" epoch="0" arch="noarch" src="xorg-x11-util-macros-1.19.2-1.el8.src.rpm">
          <filename>xorg-x11-util-macros-1.19.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">61b969180f84d43a8bce3ffc608c7dc1225d2e363a1d10f787ef51fc42c71359</sum>
        </package>
        <package name="libXdmcp-devel" version="1.1.3" release="1.el8" epoch="0" arch="aarch64" src="libXdmcp-1.1.3-1.el8.src.rpm">
          <filename>libXdmcp-devel-1.1.3-1.el8.aarch64.rpm</filename>
          <sum type="sha256">648ad1bf60b7bb4f42c67a5b4a13dbb51dd09fc42df6887072c36011c48b5a41</sum>
        </package>
        <package name="libXvMC-devel" version="1.0.12" release="1.el8" epoch="0" arch="aarch64" src="libXvMC-1.0.12-1.el8.src.rpm">
          <filename>libXvMC-devel-1.0.12-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b32e900c599470e2e0c4b40339ddcddf33b7e04daf4161be0d54cae1f8a65bc9</sum>
        </package>
        <package name="xorg-x11-xtrans-devel" version="1.4.0" release="1.el8" epoch="0" arch="noarch" src="xorg-x11-xtrans-devel-1.4.0-1.el8.src.rpm">
          <filename>xorg-x11-xtrans-devel-1.4.0-1.el8.noarch.rpm</filename>
          <sum type="sha256">d28a83aca7419a7b3bf879108bd3bd1c467e20eeacc7d228d7e170c91518a803</sum>
        </package>
        <package name="xorg-x11-xkb-utils-devel" version="7.7" release="28.el8" epoch="0" arch="aarch64" src="xorg-x11-xkb-utils-7.7-28.el8.src.rpm">
          <filename>xorg-x11-xkb-utils-devel-7.7-28.el8.aarch64.rpm</filename>
          <sum type="sha256">f9ef31e1ee8b2966708e3478ed44729859187469dc94b33b6df11d04dce75537</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2020:4838</id>
    <title>dtc bug fix and enhancement update</title>
    <issued date="2020-11-03 12:40:16"/>
    <updated date="2020-11-03 20:02:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for dtc is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2020-4838.html" id="ALEA-2020-4838" type="self" title="ALEA-2020-4838"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libfdt-devel" version="1.6.0" release="1.el8" epoch="0" arch="aarch64" src="dtc-1.6.0-1.el8.src.rpm">
          <filename>libfdt-devel-1.6.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">91f3de43887ac67caff4ce8a602dbfca8a504f7ac7dac226f50bc84cb8536ceb</sum>
        </package>
        <package name="dtc" version="1.6.0" release="1.el8" epoch="0" arch="aarch64" src="dtc-1.6.0-1.el8.src.rpm">
          <filename>dtc-1.6.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">dfbd32fc9f7986fe658f42b41f3b794ab87c8fdc88cd0eb9508557d393f98b98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2021:1712</id>
    <title>libpcap bug fix and enhancement update</title>
    <issued date="2021-05-18 05:53:40"/>
    <updated date="2021-05-18 05:53:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libpcap is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-1712.html" id="ALEA-2021-1712" type="self" title="ALEA-2021-1712"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libpcap-devel" version="1.9.1" release="5.el8" epoch="14" arch="aarch64" src="libpcap-1.9.1-5.el8.src.rpm">
          <filename>libpcap-devel-1.9.1-5.el8.aarch64.rpm</filename>
          <sum type="sha256">fdc0acf0558598239e7aca6cdab9e6b95dc277958bc8a46c2cacdf3c3095c14a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2021:1720</id>
    <title>ima-evm-utils bug fix and enhancement update</title>
    <issued date="2021-05-18 05:54:47"/>
    <updated date="2021-05-18 05:54:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for ima-evm-utils is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-1720.html" id="ALEA-2021-1720" type="self" title="ALEA-2021-1720"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ima-evm-utils-devel" version="1.3.2" release="12.el8" epoch="0" arch="aarch64" src="ima-evm-utils-1.3.2-12.el8.src.rpm">
          <filename>ima-evm-utils-devel-1.3.2-12.el8.aarch64.rpm</filename>
          <sum type="sha256">c4ebb85f424b1488d71537420fd70a21e7b28e36825d660ef22498f859114dc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2021:1919</id>
    <title>new module: python39:3.9</title>
    <issued date="2021-05-18 06:24:01"/>
    <updated date="2021-05-18 06:23:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>A new python39:3.9 module is now available for AlmaLinux</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

This enhancement update adds the python39:3.9 module to AlmaLinux (BZ#1877430)

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-1919.html" id="ALEA-2021-1919" type="self" title="ALEA-2021-1919"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python39-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python39-devel</name>
        <module name="python39-devel" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2021:1965</id>
    <title>py3c bug fix and enhancement update</title>
    <issued date="2021-05-18 06:30:07"/>
    <updated date="2021-05-18 06:29:55"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for py3c is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-1965.html" id="ALEA-2021-1965" type="self" title="ALEA-2021-1965"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="py3c-devel" version="1.2" release="4.el8" epoch="0" arch="aarch64" src="py3c-1.2-4.el8.src.rpm">
          <filename>py3c-devel-1.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">655d4f83ae3152286a9aa217003d0cf703280ea7a8177dc8e7a9619154ad0dd6</sum>
        </package>
        <package name="py3c-doc" version="1.2" release="4.el8" epoch="0" arch="noarch" src="py3c-1.2-4.el8.src.rpm">
          <filename>py3c-doc-1.2-4.el8.noarch.rpm</filename>
          <sum type="sha256">de740a23dfab0afd1f859c50c2228fa7c128e1436c5f857a62d7e121887c4a2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2021:4322</id>
    <title>unicode-ucd bug fix and enhancement update</title>
    <issued date="2021-11-09 09:01:00"/>
    <updated date="2021-11-09 13:02:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for unicode-ucd is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-4322.html" id="ALEA-2021-4322" type="self" title="ALEA-2021-4322"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="unicode-ucd-unihan" version="11.0.0" release="2.el8" epoch="0" arch="noarch" src="unicode-ucd-11.0.0-2.el8.src.rpm">
          <filename>unicode-ucd-unihan-11.0.0-2.el8.noarch.rpm</filename>
          <sum type="sha256">2b5215f78b9af6a7cf28bf99e11f23a01b8c4488bbe62055db11b746ab1ab253</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2021:4335</id>
    <title>tesseract bug fix and enhancement update</title>
    <issued date="2021-11-09 09:01:46"/>
    <updated date="2021-11-09 13:03:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for tesseract is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-4335.html" id="ALEA-2021-4335" type="self" title="ALEA-2021-4335"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="tesseract-devel" version="4.1.1" release="2.el8" epoch="0" arch="aarch64" src="tesseract-4.1.1-2.el8.src.rpm">
          <filename>tesseract-devel-4.1.1-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cda1029fa18178eba6f136418634e6c8e3ea68f2ab0e5b115a698a3d7003094c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2021:4405</id>
    <title>libmodulemd bug fix and enhancement update</title>
    <issued date="2021-11-09 09:18:04"/>
    <updated date="2021-11-09 13:12:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for libmodulemd is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-4405.html" id="ALEA-2021-4405" type="self" title="ALEA-2021-4405"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libmodulemd-devel" version="2.13.0" release="1.el8" epoch="0" arch="aarch64" src="libmodulemd-2.13.0-1.el8.src.rpm">
          <filename>libmodulemd-devel-2.13.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">9ee2706b4b7afa3756024cb45aa76259d7f638e994cc05c4f33889c30806ddd0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2021:4488</id>
    <title>hwloc bug fix and enhancement update</title>
    <issued date="2021-11-09 09:32:14"/>
    <updated date="2021-11-09 13:19:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for hwloc is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-4488.html" id="ALEA-2021-4488" type="self" title="ALEA-2021-4488"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="hwloc-devel" version="2.2.0" release="3.el8" epoch="0" arch="aarch64" src="hwloc-2.2.0-3.el8.src.rpm">
          <filename>hwloc-devel-2.2.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f36339deaadf6dbb1cfdc4f154d39ec915cacd46887e483e8d815d4303e7e910</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="2">
    <id>ALEA-2021:4520</id>
    <title>po4a bug fix and enhancement update</title>
    <issued date="2021-11-09 09:40:51"/>
    <updated date="2021-11-09 13:23:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for po4a is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2021-4520.html" id="ALEA-2021-4520" type="self" title="ALEA-2021-4520"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="po4a" version="0.63" release="1.el8" epoch="0" arch="noarch" src="po4a-0.63-1.el8.src.rpm">
          <filename>po4a-0.63-1.el8.noarch.rpm</filename>
          <sum type="sha256">5e2724f0a7770d662e57f3f801e76b140f8251f52a4571f5e0ac702d2c3d42eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2022:1733</id>
    <title>java-17-openjdk bug fix and enhancement update</title>
    <issued date="2022-05-10 14:59:38"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>None</severity>
    <summary>An update for java-17-openjdk is now available for AlmaLinux</summary>
    <description>This erratum reinstates changes made to java-17-openjdk in AlmaLinux 8.6 GA.  The original builds for AlmaLinux 8.6 GA will have been superseded by newer binaries released as part of the April 2022 security update for AlmaLinux 8.5.

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2022-1733.html" id="ALEA-2022-1733" type="self" title="ALEA-2022-1733"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">09359e5a6918da5589e66664bbd41f4980c841aaba59eb79e19793144a458016</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">40640494334621f39a59161952b2d404648d3e5bd967d5a136b6b0990cc1d479</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4ac9daabef8abbc5ecf6722fb0da36c9afe0ee5f8edd0fdf07d6040609131127</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4dd15fa7b2c7a54e2dae4318e96a3586d6fe2e6abc8eacfec294877394b5269b</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9818ccc8e25171c4206b5b726741809e51ada1f1b2dc8c59ddb079c605da45d6</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a722acc99cbe0fe1c8a8b4099b2c3c7fce2f47d957513d4a455aacee102df1ac</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b087f13219d148491d1d2e4d0be45399e3ca3746b47f8750f8b9cadfd31de33d</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c007cbdd747acf03bb0ed8125d3b089845caa62e796e18fed76f31c243d4d344</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c712d6a98ae0f1c47121a23a14e265f6aa63abef0a982e244fccf6a6b5a5a59a</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d1ecfba20b3514cfe27958d3f14ac138b86d7b336efacb7d9bf4ae498eec8da6</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">de2061a44ba58ce1299ee730a1da7c495aba69de2fb0831977e03dbe62daeed3</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">e9a52448c3d3081154f72b2d8e98dd785ed3a6476dfb71a0c75192304c0c257d</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">fb8a9c10cb3f076a38e73b5a619c5998979d2979a6a6153a2cac86ddef1feb3a</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.3.0.7" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.7-2.el8_6.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.3.0.7-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">fe66d138215db54f7cd438909f1dde91440568ef0386c44bcaeb97a854e65091</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="1">
    <id>ALEA-2022:1772</id>
    <title>nmstate bug fix and enhancement update</title>
    <issued date="2022-05-10 08:00:26"/>
    <updated date="2022-05-10 08:00:24"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for nmstate is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2022-1772.html" id="ALEA-2022-1772" type="self" title="ALEA-2022-1772"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="nmstate-devel" version="1.2.1" release="1.el8" epoch="0" arch="aarch64" src="nmstate-1.2.1-1.el8.src.rpm">
          <filename>nmstate-devel-1.2.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e92e916045744249aadbef0defa1028f4d78135f2ef2a5fb9a782df548654f5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="3">
    <id>ALEA-2022:1962</id>
    <title>vulkan bug fix and enhancement update</title>
    <issued date="2022-05-10 06:41:35"/>
    <updated date="2022-05-10 08:09:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for vulkan is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2022-1962.html" id="ALEA-2022-1962" type="self" title="ALEA-2022-1962"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="spirv-tools-devel" version="2022.1" release="1.20220202.git45dd184.el8" epoch="0" arch="aarch64" src="spirv-tools-2022.1-1.20220202.git45dd184.el8.src.rpm">
          <filename>spirv-tools-devel-2022.1-1.20220202.git45dd184.el8.aarch64.rpm</filename>
          <sum type="sha256">2444c266e8d253020de1b2835e5a9eeb37697ec69f37ce86712aa35458af85f7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="3">
    <id>ALEA-2022:1985</id>
    <title>NetworkManager bug fix and enhancement update</title>
    <issued date="2022-05-10 06:43:23"/>
    <updated date="2022-05-10 08:11:07"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>None</severity>
    <summary>An update for NetworkManager is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2022-1985.html" id="ALEA-2022-1985" type="self" title="ALEA-2022-1985"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="NetworkManager-libnm-devel" version="1.36.0" release="4.el8" epoch="1" arch="aarch64" src="NetworkManager-1.36.0-4.el8.src.rpm">
          <filename>NetworkManager-libnm-devel-1.36.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">6fe825a61f1d34eb6a25473b66a17035fa935ce9b68263bc528bb0672953057f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="enhancement" version="4">
    <id>ALEA-2022:2014</id>
    <title>RDMA stack bug fix and enhancement update</title>
    <issued date="2022-05-10 06:45:31"/>
    <updated date="2022-05-10 08:13:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>None</severity>
    <summary>An update for RDMA stack is now available for AlmaLinux</summary>
    <description>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALEA-2022-2014.html" id="ALEA-2022-2014" type="self" title="ALEA-2022-2014"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libfabric-devel" version="1.14.0" release="1.el8" epoch="0" arch="aarch64" src="libfabric-1.14.0-1.el8.src.rpm">
          <filename>libfabric-devel-1.14.0-1.el8.aarch64.rpm</filename>
          <sum type="sha256">029616c76fd8f26caf312ab356f2a74c4f3f81ddd71799fed729a42473ca29b0</sum>
        </package>
        <package name="pmix-devel" version="2.2.5" release="1.el8" epoch="0" arch="aarch64" src="pmix-2.2.5-1.el8.src.rpm">
          <filename>pmix-devel-2.2.5-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4d0afa87f58e760ba0f53c668cebf311fc992ff058962e74e7e760dc4a7191aa</sum>
        </package>
        <package name="python3-mpich" version="3.4.2" release="1.el8" epoch="0" arch="aarch64" src="mpich-3.4.2-1.el8.src.rpm">
          <filename>python3-mpich-3.4.2-1.el8.aarch64.rpm</filename>
          <sum type="sha256">64278f3605df8948b5813a466e0b166a4957bf165486dd6ea1fd0da6436eae75</sum>
        </package>
        <package name="python3-openmpi" version="4.1.1" release="3.el8" epoch="1" arch="aarch64" src="openmpi-4.1.1-3.el8.src.rpm">
          <filename>python3-openmpi-4.1.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e91f225c7e3927c4929d01cde5135c648e512ba0835dd4c58121726e798db826</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2019:2722</id>
    <title>Low: libwmf security update</title>
    <issued date="2019-09-10 15:32:59"/>
    <updated date="2019-09-10 15:32:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Low</severity>
    <summary>An update for libwmf is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libwmf packages provide a library for reading and converting Windows Metafile Format (WMF) vector graphics. The library is used by applications such as GIMP and ImageMagick.

Security Fix(es):

* gd: double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2019-2722.html" id="ALSA-2019-2722" type="self" title="ALSA-2019-2722"/>
      <reference href="https://vulners.com/cve/CVE-2019-6978" id="CVE-2019-6978" type="cve" title="CVE-2019-6978"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libwmf-devel" version="0.2.9" release="8.el8_0" epoch="0" arch="aarch64" src="libwmf-0.2.9-8.el8_0.src.rpm">
          <filename>libwmf-devel-0.2.9-8.el8_0.aarch64.rpm</filename>
          <sum type="sha256">0b3bb7bc2e117303c1b72678a0f65bad4be955cd997427492ebe7f121fd2aa68</sum>
        </package>
        <package name="libwmf-lite" version="0.2.9" release="8.el8_0" epoch="0" arch="aarch64" src="libwmf-0.2.9-8.el8_0.src.rpm">
          <filename>libwmf-lite-0.2.9-8.el8_0.aarch64.rpm</filename>
          <sum type="sha256">56ee0267ef85c3fcbdcd0cbb15e1e800fadd9f4876942be31bf9ddf6d15191a5</sum>
        </package>
        <package name="libwmf" version="0.2.9" release="8.el8_0" epoch="0" arch="aarch64" src="libwmf-0.2.9-8.el8_0.src.rpm">
          <filename>libwmf-0.2.9-8.el8_0.aarch64.rpm</filename>
          <sum type="sha256">84923c479012c05bb07de347ca009360fbf0c1dab273f8db6651c577f9eaffa1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="4">
    <id>ALSA-2019:3553</id>
    <title>Low: GNOME security, bug fix, and enhancement update</title>
    <issued date="2019-11-05 17:59:21"/>
    <updated date="2019-11-05 17:59:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>7</pushcount>
    <severity>Low</severity>
    <summary>An update for GNOME is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail() (CVE-2019-11459)

* gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2019-3553.html" id="ALSA-2019-3553" type="self" title="ALSA-2019-3553"/>
      <reference href="https://vulners.com/cve/CVE-2019-11070" id="CVE-2019-11070" type="cve" title="CVE-2019-11070"/>
      <reference href="https://vulners.com/cve/CVE-2019-11459" id="CVE-2019-11459" type="cve" title="CVE-2019-11459"/>
      <reference href="https://vulners.com/cve/CVE-2019-12795" id="CVE-2019-12795" type="cve" title="CVE-2019-12795"/>
      <reference href="https://vulners.com/cve/CVE-2019-3820" id="CVE-2019-3820" type="cve" title="CVE-2019-3820"/>
      <reference href="https://vulners.com/cve/CVE-2019-6237" id="CVE-2019-6237" type="cve" title="CVE-2019-6237"/>
      <reference href="https://vulners.com/cve/CVE-2019-6251" id="CVE-2019-6251" type="cve" title="CVE-2019-6251"/>
      <reference href="https://vulners.com/cve/CVE-2019-8506" id="CVE-2019-8506" type="cve" title="CVE-2019-8506"/>
      <reference href="https://vulners.com/cve/CVE-2019-8518" id="CVE-2019-8518" type="cve" title="CVE-2019-8518"/>
      <reference href="https://vulners.com/cve/CVE-2019-8523" id="CVE-2019-8523" type="cve" title="CVE-2019-8523"/>
      <reference href="https://vulners.com/cve/CVE-2019-8524" id="CVE-2019-8524" type="cve" title="CVE-2019-8524"/>
      <reference href="https://vulners.com/cve/CVE-2019-8535" id="CVE-2019-8535" type="cve" title="CVE-2019-8535"/>
      <reference href="https://vulners.com/cve/CVE-2019-8536" id="CVE-2019-8536" type="cve" title="CVE-2019-8536"/>
      <reference href="https://vulners.com/cve/CVE-2019-8544" id="CVE-2019-8544" type="cve" title="CVE-2019-8544"/>
      <reference href="https://vulners.com/cve/CVE-2019-8551" id="CVE-2019-8551" type="cve" title="CVE-2019-8551"/>
      <reference href="https://vulners.com/cve/CVE-2019-8558" id="CVE-2019-8558" type="cve" title="CVE-2019-8558"/>
      <reference href="https://vulners.com/cve/CVE-2019-8559" id="CVE-2019-8559" type="cve" title="CVE-2019-8559"/>
      <reference href="https://vulners.com/cve/CVE-2019-8563" id="CVE-2019-8563" type="cve" title="CVE-2019-8563"/>
      <reference href="https://vulners.com/cve/CVE-2019-8571" id="CVE-2019-8571" type="cve" title="CVE-2019-8571"/>
      <reference href="https://vulners.com/cve/CVE-2019-8583" id="CVE-2019-8583" type="cve" title="CVE-2019-8583"/>
      <reference href="https://vulners.com/cve/CVE-2019-8584" id="CVE-2019-8584" type="cve" title="CVE-2019-8584"/>
      <reference href="https://vulners.com/cve/CVE-2019-8586" id="CVE-2019-8586" type="cve" title="CVE-2019-8586"/>
      <reference href="https://vulners.com/cve/CVE-2019-8587" id="CVE-2019-8587" type="cve" title="CVE-2019-8587"/>
      <reference href="https://vulners.com/cve/CVE-2019-8594" id="CVE-2019-8594" type="cve" title="CVE-2019-8594"/>
      <reference href="https://vulners.com/cve/CVE-2019-8595" id="CVE-2019-8595" type="cve" title="CVE-2019-8595"/>
      <reference href="https://vulners.com/cve/CVE-2019-8596" id="CVE-2019-8596" type="cve" title="CVE-2019-8596"/>
      <reference href="https://vulners.com/cve/CVE-2019-8597" id="CVE-2019-8597" type="cve" title="CVE-2019-8597"/>
      <reference href="https://vulners.com/cve/CVE-2019-8601" id="CVE-2019-8601" type="cve" title="CVE-2019-8601"/>
      <reference href="https://vulners.com/cve/CVE-2019-8607" id="CVE-2019-8607" type="cve" title="CVE-2019-8607"/>
      <reference href="https://vulners.com/cve/CVE-2019-8608" id="CVE-2019-8608" type="cve" title="CVE-2019-8608"/>
      <reference href="https://vulners.com/cve/CVE-2019-8609" id="CVE-2019-8609" type="cve" title="CVE-2019-8609"/>
      <reference href="https://vulners.com/cve/CVE-2019-8610" id="CVE-2019-8610" type="cve" title="CVE-2019-8610"/>
      <reference href="https://vulners.com/cve/CVE-2019-8611" id="CVE-2019-8611" type="cve" title="CVE-2019-8611"/>
      <reference href="https://vulners.com/cve/CVE-2019-8615" id="CVE-2019-8615" type="cve" title="CVE-2019-8615"/>
      <reference href="https://vulners.com/cve/CVE-2019-8619" id="CVE-2019-8619" type="cve" title="CVE-2019-8619"/>
      <reference href="https://vulners.com/cve/CVE-2019-8622" id="CVE-2019-8622" type="cve" title="CVE-2019-8622"/>
      <reference href="https://vulners.com/cve/CVE-2019-8623" id="CVE-2019-8623" type="cve" title="CVE-2019-8623"/>
      <reference href="https://vulners.com/cve/CVE-2019-8666" id="CVE-2019-8666" type="cve" title="CVE-2019-8666"/>
      <reference href="https://vulners.com/cve/CVE-2019-8671" id="CVE-2019-8671" type="cve" title="CVE-2019-8671"/>
      <reference href="https://vulners.com/cve/CVE-2019-8672" id="CVE-2019-8672" type="cve" title="CVE-2019-8672"/>
      <reference href="https://vulners.com/cve/CVE-2019-8673" id="CVE-2019-8673" type="cve" title="CVE-2019-8673"/>
      <reference href="https://vulners.com/cve/CVE-2019-8676" id="CVE-2019-8676" type="cve" title="CVE-2019-8676"/>
      <reference href="https://vulners.com/cve/CVE-2019-8677" id="CVE-2019-8677" type="cve" title="CVE-2019-8677"/>
      <reference href="https://vulners.com/cve/CVE-2019-8679" id="CVE-2019-8679" type="cve" title="CVE-2019-8679"/>
      <reference href="https://vulners.com/cve/CVE-2019-8681" id="CVE-2019-8681" type="cve" title="CVE-2019-8681"/>
      <reference href="https://vulners.com/cve/CVE-2019-8686" id="CVE-2019-8686" type="cve" title="CVE-2019-8686"/>
      <reference href="https://vulners.com/cve/CVE-2019-8687" id="CVE-2019-8687" type="cve" title="CVE-2019-8687"/>
      <reference href="https://vulners.com/cve/CVE-2019-8689" id="CVE-2019-8689" type="cve" title="CVE-2019-8689"/>
      <reference href="https://vulners.com/cve/CVE-2019-8690" id="CVE-2019-8690" type="cve" title="CVE-2019-8690"/>
      <reference href="https://vulners.com/cve/CVE-2019-8726" id="CVE-2019-8726" type="cve" title="CVE-2019-8726"/>
      <reference href="https://vulners.com/cve/CVE-2019-8735" id="CVE-2019-8735" type="cve" title="CVE-2019-8735"/>
      <reference href="https://vulners.com/cve/CVE-2019-8768" id="CVE-2019-8768" type="cve" title="CVE-2019-8768"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libpurple-devel" version="2.13.0" release="5.el8" epoch="0" arch="aarch64" src="pidgin-2.13.0-5.el8.src.rpm">
          <filename>libpurple-devel-2.13.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">15ad6ab9467991c647344662e6d7f906f48e3bce684f50028692ec0fde23e13e</sum>
        </package>
        <package name="gdk-pixbuf2-devel" version="2.36.12" release="5.el8" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-5.el8.src.rpm">
          <filename>gdk-pixbuf2-devel-2.36.12-5.el8.aarch64.rpm</filename>
          <sum type="sha256">2265293ef782137c260608aa359ffb82b6e7220929c21b1437fa1f8093c03cdb</sum>
        </package>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="5.el8" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-5.el8.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-5.el8.aarch64.rpm</filename>
          <sum type="sha256">350dc001dfb0a1de65267d85d8f40c2f707cde19dffc4b163b03cdd527c657d6</sum>
        </package>
        <package name="gdk-pixbuf2" version="2.36.12" release="5.el8" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-5.el8.src.rpm">
          <filename>gdk-pixbuf2-2.36.12-5.el8.aarch64.rpm</filename>
          <sum type="sha256">70051b0c1b16938a0d907af5d89ae3b9f7451214b26a01669a98e1cfa8ea41cb</sum>
        </package>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="5.el8" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-5.el8.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-5.el8.aarch64.rpm</filename>
          <sum type="sha256">b4a21cf2e1d03e796323f28e14989de8407ec12bd45e974f69f57703fbbdad42</sum>
        </package>
        <package name="gdk-pixbuf2-modules" version="2.36.12" release="5.el8" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-5.el8.src.rpm">
          <filename>gdk-pixbuf2-modules-2.36.12-5.el8.aarch64.rpm</filename>
          <sum type="sha256">be9888eae3ad5d48240841bb198f86fed33aa918aef70934da634e330650c284</sum>
        </package>
        <package name="libpurple" version="2.13.0" release="5.el8" epoch="0" arch="aarch64" src="pidgin-2.13.0-5.el8.src.rpm">
          <filename>libpurple-2.13.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">cd55555c662d21cfafc27f64ce5893b2c2c9ef6747975b09e07056a62bb01b07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2019:3703</id>
    <title>Low: libvorbis security update</title>
    <issued date="2019-11-05 20:52:55"/>
    <updated date="2019-11-05 20:52:47"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Low</severity>
    <summary>An update for libvorbis is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.

Security Fix(es):

* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)

* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2019-3703.html" id="ALSA-2019-3703" type="self" title="ALSA-2019-3703"/>
      <reference href="https://vulners.com/cve/CVE-2018-10392" id="CVE-2018-10392" type="cve" title="CVE-2018-10392"/>
      <reference href="https://vulners.com/cve/CVE-2018-10393" id="CVE-2018-10393" type="cve" title="CVE-2018-10393"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libvorbis-devel" version="1.3.6" release="2.el8" epoch="1" arch="aarch64" src="libvorbis-1.3.6-2.el8.src.rpm">
          <filename>libvorbis-devel-1.3.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0c596e145bc54ea6df927f7e74bd83621e31f547afe114fb40856ff50416dfb7</sum>
        </package>
        <package name="libvorbis-devel-docs" version="1.3.6" release="2.el8" epoch="1" arch="noarch" src="libvorbis-1.3.6-2.el8.src.rpm">
          <filename>libvorbis-devel-docs-1.3.6-2.el8.noarch.rpm</filename>
          <sum type="sha256">8fed9a09938ee9f62ed4514fddbdbef65fb3e1330056f8b34c22f8ef59f15a78</sum>
        </package>
        <package name="libvorbis" version="1.3.6" release="2.el8" epoch="1" arch="aarch64" src="libvorbis-1.3.6-2.el8.src.rpm">
          <filename>libvorbis-1.3.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b10c8f96d4347deb9104410ef0e81ffca909121555087b2c1e4fa1a75cb8f40b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2019:3708</id>
    <title>Moderate: mariadb:10.3 security and bug fix update</title>
    <issued date="2019-11-05 20:53:43"/>
    <updated date="2019-11-05 20:53:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the mariadb:10.3 module is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 

The following packages have been upgraded to a later upstream version: mariadb (10.3.17), galera (25.3.26). (BZ#1701687, BZ#1711265, BZ#1741358)

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Jan 2019) (CVE-2019-2510)

* mysql: Server: DDL unspecified vulnerability (CPU Jan 2019) (CVE-2019-2537)

* mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) (CVE-2019-2614)

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) (CVE-2019-2627)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2019) (CVE-2019-2628)

* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) (CVE-2019-2737)

* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) (CVE-2019-2739)

* mysql: Server: XML unspecified vulnerability (CPU Jul 2019) (CVE-2019-2740)

* mysql: InnoDB unspecified vulnerability (CPU Jul 2019) (CVE-2019-2758)

* mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) (CVE-2019-2805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2019-3708.html" id="ALSA-2019-3708" type="self" title="ALSA-2019-3708"/>
      <reference href="https://vulners.com/cve/CVE-2019-2510" id="CVE-2019-2510" type="cve" title="CVE-2019-2510"/>
      <reference href="https://vulners.com/cve/CVE-2019-2537" id="CVE-2019-2537" type="cve" title="CVE-2019-2537"/>
      <reference href="https://vulners.com/cve/CVE-2019-2614" id="CVE-2019-2614" type="cve" title="CVE-2019-2614"/>
      <reference href="https://vulners.com/cve/CVE-2019-2627" id="CVE-2019-2627" type="cve" title="CVE-2019-2627"/>
      <reference href="https://vulners.com/cve/CVE-2019-2628" id="CVE-2019-2628" type="cve" title="CVE-2019-2628"/>
      <reference href="https://vulners.com/cve/CVE-2019-2737" id="CVE-2019-2737" type="cve" title="CVE-2019-2737"/>
      <reference href="https://vulners.com/cve/CVE-2019-2739" id="CVE-2019-2739" type="cve" title="CVE-2019-2739"/>
      <reference href="https://vulners.com/cve/CVE-2019-2740" id="CVE-2019-2740" type="cve" title="CVE-2019-2740"/>
      <reference href="https://vulners.com/cve/CVE-2019-2758" id="CVE-2019-2758" type="cve" title="CVE-2019-2758"/>
      <reference href="https://vulners.com/cve/CVE-2019-2805" id="CVE-2019-2805" type="cve" title="CVE-2019-2805"/>
      <reference href="https://vulners.com/cve/CVE-2020-2922" id="CVE-2020-2922" type="cve" title="CVE-2020-2922"/>
      <reference href="https://vulners.com/cve/CVE-2021-2007" id="CVE-2021-2007" type="cve" title="CVE-2021-2007"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_mariadb-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_mariadb-devel</name>
        <module name="mariadb-devel" stream="10.3" version="8060020220503130727" context="9edba152" arch="aarch64"/>
        <package name="asio-devel" version="1.10.8" release="7.module_el8.6.0+2867+72759d2f" epoch="0" arch="aarch64" src="asio-1.10.8-7.module_el8.6.0+2867+72759d2f.src.rpm">
          <filename>asio-devel-1.10.8-7.module_el8.6.0+2867+72759d2f.aarch64.rpm</filename>
          <sum type="sha256">63fc351fbcd03176401f95f16cebd29b23066a2a8c21696f72a9f8c2e916b4b3</sum>
        </package>
        <package name="Judy-devel" version="1.0.5" release="18.module_el8.6.0+2867+72759d2f" epoch="0" arch="aarch64" src="Judy-1.0.5-18.module_el8.6.0+2867+72759d2f.src.rpm">
          <filename>Judy-devel-1.0.5-18.module_el8.6.0+2867+72759d2f.aarch64.rpm</filename>
          <sum type="sha256">93d0e21e8df7e2b686fe949792b8587fbe3436ee13cc46cd539a1a73684fa5d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:0633</id>
    <title>Important: ppp security update</title>
    <issued date="2020-02-27 14:59:09"/>
    <updated date="2020-02-27 14:59:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Important</severity>
    <summary>An update for ppp is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The ppp packages contain the Point-to-Point Protocol (PPP) daemon and documentation for PPP support. The PPP protocol provides a method for transmitting datagrams over serial point-to-point links. PPP is usually used to dial in to an Internet Service Provider (ISP) or other organization over a modem and phone line.

Security Fix(es):

* ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-0633.html" id="ALSA-2020-0633" type="self" title="ALSA-2020-0633"/>
      <reference href="https://vulners.com/cve/CVE-2020-8597" id="CVE-2020-8597" type="cve" title="CVE-2020-8597"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ppp" version="2.4.7" release="26.el8_1" epoch="0" arch="aarch64" src="ppp-2.4.7-26.el8_1.src.rpm">
          <filename>ppp-2.4.7-26.el8_1.aarch64.rpm</filename>
          <sum type="sha256">55c558b5b4d9e7ee4f56205136a47cf7b4e8dfc72bd7ac1a8b8f108a8ccb08ff</sum>
        </package>
        <package name="ppp-devel" version="2.4.7" release="26.el8_1" epoch="0" arch="aarch64" src="ppp-2.4.7-26.el8_1.src.rpm">
          <filename>ppp-devel-2.4.7-26.el8_1.aarch64.rpm</filename>
          <sum type="sha256">5989d0916a744ac82fd78b89acf3eea6f982d6ffe96d1c4003394fc760d5c816</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:1577</id>
    <title>Moderate: exiv2 security, bug fix, and enhancement update</title>
    <issued date="2020-04-28 08:52:31"/>
    <updated date="2020-04-28 08:52:19"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Moderate</severity>
    <summary>An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.

The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)

Security Fix(es):

* exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)

* exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)

* exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)

* exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)

* exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)

* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)

* exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)

* exiv2: information leak via a crafted file (CVE-2018-11037)

* exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)

* exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)

* exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)

* exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)

* exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)

* exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)

* exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)

* exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)

* exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)

* exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)

* exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)

* exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)

* exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)

* exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)

* exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)

* exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)

* exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)

* exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)

* exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)

* exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)

* exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-1577.html" id="ALSA-2020-1577" type="self" title="ALSA-2020-1577"/>
      <reference href="https://vulners.com/cve/CVE-2017-18005" id="CVE-2017-18005" type="cve" title="CVE-2017-18005"/>
      <reference href="https://vulners.com/cve/CVE-2018-10772" id="CVE-2018-10772" type="cve" title="CVE-2018-10772"/>
      <reference href="https://vulners.com/cve/CVE-2018-11037" id="CVE-2018-11037" type="cve" title="CVE-2018-11037"/>
      <reference href="https://vulners.com/cve/CVE-2018-14338" id="CVE-2018-14338" type="cve" title="CVE-2018-14338"/>
      <reference href="https://vulners.com/cve/CVE-2018-17229" id="CVE-2018-17229" type="cve" title="CVE-2018-17229"/>
      <reference href="https://vulners.com/cve/CVE-2018-17230" id="CVE-2018-17230" type="cve" title="CVE-2018-17230"/>
      <reference href="https://vulners.com/cve/CVE-2018-17282" id="CVE-2018-17282" type="cve" title="CVE-2018-17282"/>
      <reference href="https://vulners.com/cve/CVE-2018-17581" id="CVE-2018-17581" type="cve" title="CVE-2018-17581"/>
      <reference href="https://vulners.com/cve/CVE-2018-18915" id="CVE-2018-18915" type="cve" title="CVE-2018-18915"/>
      <reference href="https://vulners.com/cve/CVE-2018-19107" id="CVE-2018-19107" type="cve" title="CVE-2018-19107"/>
      <reference href="https://vulners.com/cve/CVE-2018-19108" id="CVE-2018-19108" type="cve" title="CVE-2018-19108"/>
      <reference href="https://vulners.com/cve/CVE-2018-19535" id="CVE-2018-19535" type="cve" title="CVE-2018-19535"/>
      <reference href="https://vulners.com/cve/CVE-2018-19607" id="CVE-2018-19607" type="cve" title="CVE-2018-19607"/>
      <reference href="https://vulners.com/cve/CVE-2018-20096" id="CVE-2018-20096" type="cve" title="CVE-2018-20096"/>
      <reference href="https://vulners.com/cve/CVE-2018-20097" id="CVE-2018-20097" type="cve" title="CVE-2018-20097"/>
      <reference href="https://vulners.com/cve/CVE-2018-20098" id="CVE-2018-20098" type="cve" title="CVE-2018-20098"/>
      <reference href="https://vulners.com/cve/CVE-2018-20099" id="CVE-2018-20099" type="cve" title="CVE-2018-20099"/>
      <reference href="https://vulners.com/cve/CVE-2018-4868" id="CVE-2018-4868" type="cve" title="CVE-2018-4868"/>
      <reference href="https://vulners.com/cve/CVE-2018-9303" id="CVE-2018-9303" type="cve" title="CVE-2018-9303"/>
      <reference href="https://vulners.com/cve/CVE-2018-9304" id="CVE-2018-9304" type="cve" title="CVE-2018-9304"/>
      <reference href="https://vulners.com/cve/CVE-2018-9305" id="CVE-2018-9305" type="cve" title="CVE-2018-9305"/>
      <reference href="https://vulners.com/cve/CVE-2018-9306" id="CVE-2018-9306" type="cve" title="CVE-2018-9306"/>
      <reference href="https://vulners.com/cve/CVE-2019-13109" id="CVE-2019-13109" type="cve" title="CVE-2019-13109"/>
      <reference href="https://vulners.com/cve/CVE-2019-13111" id="CVE-2019-13111" type="cve" title="CVE-2019-13111"/>
      <reference href="https://vulners.com/cve/CVE-2019-13112" id="CVE-2019-13112" type="cve" title="CVE-2019-13112"/>
      <reference href="https://vulners.com/cve/CVE-2019-13113" id="CVE-2019-13113" type="cve" title="CVE-2019-13113"/>
      <reference href="https://vulners.com/cve/CVE-2019-13114" id="CVE-2019-13114" type="cve" title="CVE-2019-13114"/>
      <reference href="https://vulners.com/cve/CVE-2019-20421" id="CVE-2019-20421" type="cve" title="CVE-2019-20421"/>
      <reference href="https://vulners.com/cve/CVE-2019-9143" id="CVE-2019-9143" type="cve" title="CVE-2019-9143"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libgexiv2-devel" version="0.10.8" release="4.el8" epoch="0" arch="aarch64" src="libgexiv2-0.10.8-4.el8.src.rpm">
          <filename>libgexiv2-devel-0.10.8-4.el8.aarch64.rpm</filename>
          <sum type="sha256">5b60730ac8deb94adf9e436aa944dd2ba00b33574219c3561c841ad264d1b40f</sum>
        </package>
        <package name="gegl" version="0.2.0" release="39.el8" epoch="0" arch="aarch64" src="gegl-0.2.0-39.el8.src.rpm">
          <filename>gegl-0.2.0-39.el8.aarch64.rpm</filename>
          <sum type="sha256">d2eb5d08b4730614b2ad166d73961fcb7b6ae79e17f3a36afff9d970df60abdc</sum>
        </package>
        <package name="libgexiv2" version="0.10.8" release="4.el8" epoch="0" arch="aarch64" src="libgexiv2-0.10.8-4.el8.src.rpm">
          <filename>libgexiv2-0.10.8-4.el8.aarch64.rpm</filename>
          <sum type="sha256">eb752b2592e16880567f238b26a05daf8cbae702c2db0b3eecdd9a955ce18ebd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:1581</id>
    <title>Low: wavpack security update</title>
    <issued date="2020-04-28 08:53:05"/>
    <updated date="2020-04-28 08:52:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Low</severity>
    <summary>An update for wavpack is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. 

Security Fix(es):

* wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)

* wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)

* wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)

* wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)

* wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)

* wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-1581.html" id="ALSA-2020-1581" type="self" title="ALSA-2020-1581"/>
      <reference href="https://vulners.com/cve/CVE-2018-19840" id="CVE-2018-19840" type="cve" title="CVE-2018-19840"/>
      <reference href="https://vulners.com/cve/CVE-2018-19841" id="CVE-2018-19841" type="cve" title="CVE-2018-19841"/>
      <reference href="https://vulners.com/cve/CVE-2019-1010315" id="CVE-2019-1010315" type="cve" title="CVE-2019-1010315"/>
      <reference href="https://vulners.com/cve/CVE-2019-1010317" id="CVE-2019-1010317" type="cve" title="CVE-2019-1010317"/>
      <reference href="https://vulners.com/cve/CVE-2019-1010319" id="CVE-2019-1010319" type="cve" title="CVE-2019-1010319"/>
      <reference href="https://vulners.com/cve/CVE-2019-11498" id="CVE-2019-11498" type="cve" title="CVE-2019-11498"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="wavpack-devel" version="5.1.0" release="15.el8" epoch="0" arch="aarch64" src="wavpack-5.1.0-15.el8.src.rpm">
          <filename>wavpack-devel-5.1.0-15.el8.aarch64.rpm</filename>
          <sum type="sha256">443e33b00511a651e84d567bb5bc012980a457c94c5d8daea67e70921aff439d</sum>
        </package>
        <package name="wavpack" version="5.1.0" release="15.el8" epoch="0" arch="aarch64" src="wavpack-5.1.0-15.el8.src.rpm">
          <filename>wavpack-5.1.0-15.el8.aarch64.rpm</filename>
          <sum type="sha256">d2e6d2c7f2ec0e0c73cc646d5ef9d458c3640f39cb5b956878cfd290d40b382b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:1616</id>
    <title>Low: irssi security update</title>
    <issued date="2020-04-28 08:56:59"/>
    <updated date="2020-04-28 08:56:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Low</severity>
    <summary>An update for irssi is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Irssi is a modular IRC client with Perl scripting. 

Security Fix(es):

* irssi: use after free when sending SASL login to server (CVE-2019-13045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-1616.html" id="ALSA-2020-1616" type="self" title="ALSA-2020-1616"/>
      <reference href="https://vulners.com/cve/CVE-2019-13045" id="CVE-2019-13045" type="cve" title="CVE-2019-13045"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="irssi" version="1.1.1" release="3.el8" epoch="0" arch="aarch64" src="irssi-1.1.1-3.el8.src.rpm">
          <filename>irssi-1.1.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">19ee000fcd8f49917150b262476a41fc3c0c5a3c8848b442ace795eef1d55bd9</sum>
        </package>
        <package name="irssi-devel" version="1.1.1" release="3.el8" epoch="0" arch="aarch64" src="irssi-1.1.1-3.el8.src.rpm">
          <filename>irssi-devel-1.1.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">86502eb9a2c2de3c84e1f637f082d8a35bc5af0a89d7ba4abef6d6b8a2eea7d8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:1631</id>
    <title>Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update</title>
    <issued date="2020-04-28 08:58:37"/>
    <updated date="2020-04-28 08:58:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>6</pushcount>
    <severity>Low</severity>
    <summary>An update for GStreamer, libmad, and SDL is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The GStreamer library provides a streaming media framework based on graphs of media data filters.

The libmad package is an MPEG audio decoder capable of 24-bit output. 

Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.

Security Fix(es):

* libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-1631.html" id="ALSA-2020-1631" type="self" title="ALSA-2020-1631"/>
      <reference href="https://vulners.com/cve/CVE-2018-7263" id="CVE-2018-7263" type="cve" title="CVE-2018-7263"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="1.el8" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.16.1-1.el8.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">11a985deb8630b1d78fbcdcf3957101bd28a51d4c51a6559aaf2f7cf7c4a950a</sum>
        </package>
        <package name="orc" version="0.4.28" release="3.el8" epoch="0" arch="aarch64" src="orc-0.4.28-3.el8.src.rpm">
          <filename>orc-0.4.28-3.el8.aarch64.rpm</filename>
          <sum type="sha256">2469a52ee3094677545d654fa827b3a058d4a89fa71a8c54384d1cc3d0a20cc6</sum>
        </package>
        <package name="gstreamer1" version="1.16.1" release="2.el8" epoch="0" arch="aarch64" src="gstreamer1-1.16.1-2.el8.src.rpm">
          <filename>gstreamer1-1.16.1-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3a506700c32f8cb709a400af5fb16b3e5d66d7ec6aeeb139ce92c265c7809532</sum>
        </package>
        <package name="SDL2-devel" version="2.0.10" release="2.el8" epoch="0" arch="aarch64" src="SDL2-2.0.10-2.el8.src.rpm">
          <filename>SDL2-devel-2.0.10-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3a5a868cb21cf814208903c51168c18a793a094ac6b686e47d5fb3e4cd9e7e6b</sum>
        </package>
        <package name="libmad-devel" version="0.15.1b" release="25.el8" epoch="0" arch="aarch64" src="libmad-0.15.1b-25.el8.src.rpm">
          <filename>libmad-devel-0.15.1b-25.el8.aarch64.rpm</filename>
          <sum type="sha256">3ec60291cec2e45700354af62dc4a19d8d9b6517c9b6ce0b9eceb0442bc78b46</sum>
        </package>
        <package name="SDL2-static" version="2.0.10" release="2.el8" epoch="0" arch="aarch64" src="SDL2-2.0.10-2.el8.src.rpm">
          <filename>SDL2-static-2.0.10-2.el8.aarch64.rpm</filename>
          <sum type="sha256">54a9d7eaa01c4d430bdf96dcedeb96acdd7d458e42d225c2d647fc98a535ad25</sum>
        </package>
        <package name="gstreamer1-plugins-bad-free" version="1.16.1" release="1.el8" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.16.1-1.el8.src.rpm">
          <filename>gstreamer1-plugins-bad-free-1.16.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">5b266d4a2d0e7cc02a47e4266b15f6522fc89b4f9c86eb08655b6d7085791127</sum>
        </package>
        <package name="orc-devel" version="0.4.28" release="3.el8" epoch="0" arch="aarch64" src="orc-0.4.28-3.el8.src.rpm">
          <filename>orc-devel-0.4.28-3.el8.aarch64.rpm</filename>
          <sum type="sha256">7c4f631e1832f2c1c817fe075d3bff1ca4d0d33216f699e254c2f9fadfd28d3d</sum>
        </package>
        <package name="gstreamer1-plugins-ugly-free" version="1.16.1" release="1.el8" epoch="0" arch="aarch64" src="gstreamer1-plugins-ugly-free-1.16.1-1.el8.src.rpm">
          <filename>gstreamer1-plugins-ugly-free-1.16.1-1.el8.aarch64.rpm</filename>
          <sum type="sha256">abb1391ade43dc416369626d8ab2fdc3143b1f056ffb1a7a065b1d07d61a3a04</sum>
        </package>
        <package name="orc-compiler" version="0.4.28" release="3.el8" epoch="0" arch="aarch64" src="orc-0.4.28-3.el8.src.rpm">
          <filename>orc-compiler-0.4.28-3.el8.aarch64.rpm</filename>
          <sum type="sha256">ac717bdb9bb16c172b542435ec757b119ae61f455b11631d9d204717541a528f</sum>
        </package>
        <package name="gstreamer1-devel" version="1.16.1" release="2.el8" epoch="0" arch="aarch64" src="gstreamer1-1.16.1-2.el8.src.rpm">
          <filename>gstreamer1-devel-1.16.1-2.el8.aarch64.rpm</filename>
          <sum type="sha256">db60518d9301a715be217f67faeb2d9b61fcd9ae294dfe1c897f5c076fa541e5</sum>
        </package>
        <package name="libmad" version="0.15.1b" release="25.el8" epoch="0" arch="aarch64" src="libmad-0.15.1b-25.el8.src.rpm">
          <filename>libmad-0.15.1b-25.el8.aarch64.rpm</filename>
          <sum type="sha256">dc696ad2c3c8a0d6a3836c2af4a1d65fc520f5e94aa17898ac26ed6d776a6664</sum>
        </package>
        <package name="SDL2" version="2.0.10" release="2.el8" epoch="0" arch="aarch64" src="SDL2-2.0.10-2.el8.src.rpm">
          <filename>SDL2-2.0.10-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ea0c3d8005302dea83bc8cb105efd9e3d547bcd1e9d02fb59deb500b4adc8843</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:1686</id>
    <title>Low: libmspack security and bug fix update</title>
    <issued date="2020-04-28 09:05:11"/>
    <updated date="2020-04-28 09:05:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Low</severity>
    <summary>An update for libmspack is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file format used by Microsoft.

Security Fix(es):

* libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-1686.html" id="ALSA-2020-1686" type="self" title="ALSA-2020-1686"/>
      <reference href="https://vulners.com/cve/CVE-2019-1010305" id="CVE-2019-1010305" type="cve" title="CVE-2019-1010305"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libmspack-devel" version="0.7" release="0.3.alpha.el8.4" epoch="0" arch="aarch64" src="libmspack-0.7-0.3.alpha.el8.4.src.rpm">
          <filename>libmspack-devel-0.7-0.3.alpha.el8.4.aarch64.rpm</filename>
          <sum type="sha256">6802b8ffb8d994c40ed5cc1718d3ba123457d23dcdb256d92a1554c6dbbcaa23</sum>
        </package>
        <package name="libmspack" version="0.7" release="0.3.alpha.el8.4" epoch="0" arch="aarch64" src="libmspack-0.7-0.3.alpha.el8.4.src.rpm">
          <filename>libmspack-0.7-0.3.alpha.el8.4.aarch64.rpm</filename>
          <sum type="sha256">8f56372f7d3345cda6bf45a394446a14abc685f74d4e4cc5b8e0dfbfb746daa0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2020:1766</id>
    <title>Moderate: GNOME security, bug fix, and enhancement update</title>
    <issued date="2020-04-28 09:13:23"/>
    <updated date="2020-04-28 09:13:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>6</pushcount>
    <severity>Moderate</severity>
    <summary>An update for GNOME is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GNOME is the default desktop environment of AlmaLinux.

Security Fix(es):

* LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

* gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

* gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

* gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write (CVE-2019-12448)

* gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges (CVE-2019-12449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-1766.html" id="ALSA-2020-1766" type="self" title="ALSA-2020-1766"/>
      <reference href="https://vulners.com/cve/CVE-2018-20337" id="CVE-2018-20337" type="cve" title="CVE-2018-20337"/>
      <reference href="https://vulners.com/cve/CVE-2019-12447" id="CVE-2019-12447" type="cve" title="CVE-2019-12447"/>
      <reference href="https://vulners.com/cve/CVE-2019-12448" id="CVE-2019-12448" type="cve" title="CVE-2019-12448"/>
      <reference href="https://vulners.com/cve/CVE-2019-12449" id="CVE-2019-12449" type="cve" title="CVE-2019-12449"/>
      <reference href="https://vulners.com/cve/CVE-2019-3825" id="CVE-2019-3825" type="cve" title="CVE-2019-3825"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="clutter-doc" version="1.26.2" release="8.el8" epoch="0" arch="aarch64" src="clutter-1.26.2-8.el8.src.rpm">
          <filename>clutter-doc-1.26.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">2f39971682d13c5388c34fc7420501e7ae0ee1e810a76e891caed2e51babea90</sum>
        </package>
        <package name="mozjs60-devel" version="60.9.0" release="4.el8" epoch="0" arch="aarch64" src="mozjs60-60.9.0-4.el8.src.rpm">
          <filename>mozjs60-devel-60.9.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">2fcc7c993d8d65371087b229d65caab0001866a3d177db9bb42ad1f1ebf27a71</sum>
        </package>
        <package name="gnome-menus" version="3.13.3" release="11.el8" epoch="0" arch="aarch64" src="gnome-menus-3.13.3-11.el8.src.rpm">
          <filename>gnome-menus-3.13.3-11.el8.aarch64.rpm</filename>
          <sum type="sha256">4840f718e2f6b32e4ac2babba0b51c06457474308fba24ba8afc0d9f09a71517</sum>
        </package>
        <package name="baobab" version="3.28.0" release="4.el8" epoch="0" arch="aarch64" src="baobab-3.28.0-4.el8.src.rpm">
          <filename>baobab-3.28.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7f489b34f7bf148f7306795afa1418c49c154734221a4d284bc6cd587a2dcaf0</sum>
        </package>
        <package name="mozjs52" version="52.9.0" release="2.el8" epoch="0" arch="aarch64" src="mozjs52-52.9.0-2.el8.src.rpm">
          <filename>mozjs52-52.9.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">98e340aff70fdc117168ad11cd8b15cc7435b9a7347869ca5459c33c8fced779</sum>
        </package>
        <package name="clutter-devel" version="1.26.2" release="8.el8" epoch="0" arch="aarch64" src="clutter-1.26.2-8.el8.src.rpm">
          <filename>clutter-devel-1.26.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">b5d45aba30f6224eab8fab62a5b95883abc9b70e9c9ef9cca71457f76c17ebc7</sum>
        </package>
        <package name="clutter" version="1.26.2" release="8.el8" epoch="0" arch="aarch64" src="clutter-1.26.2-8.el8.src.rpm">
          <filename>clutter-1.26.2-8.el8.aarch64.rpm</filename>
          <sum type="sha256">c07b548271dcc8b754804252836678835239d2c7dc14b2e1786e74013804b89b</sum>
        </package>
        <package name="gnome-tweaks" version="3.28.1" release="7.el8" epoch="0" arch="noarch" src="gnome-tweaks-3.28.1-7.el8.src.rpm">
          <filename>gnome-tweaks-3.28.1-7.el8.noarch.rpm</filename>
          <sum type="sha256">c81e864ff35743514cd46f380b65bec1ebcb28fc261a0ccb1e1567113872546a</sum>
        </package>
        <package name="mozjs60" version="60.9.0" release="4.el8" epoch="0" arch="aarch64" src="mozjs60-60.9.0-4.el8.src.rpm">
          <filename>mozjs60-60.9.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">e726bf8b4d267ee81caef4d9616b1b1faaf60afe267c869da5346b8c25e023a7</sum>
        </package>
        <package name="mozjs52-devel" version="52.9.0" release="2.el8" epoch="0" arch="aarch64" src="mozjs52-52.9.0-2.el8.src.rpm">
          <filename>mozjs52-devel-52.9.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e7b0fabb8b14cc01ac477ebb149cad9202d7f1a8713ddbbf3607ae75693d0ede</sum>
        </package>
        <package name="gnome-menus-devel" version="3.13.3" release="11.el8" epoch="0" arch="aarch64" src="gnome-menus-3.13.3-11.el8.src.rpm">
          <filename>gnome-menus-devel-3.13.3-11.el8.aarch64.rpm</filename>
          <sum type="sha256">f135d21d3dbd44f1e0bd762d1530df90fb77f3b6c2a1893f8cac586ef6140cb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:2755</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2020-06-25 16:31:29"/>
    <updated date="2020-06-25 16:31:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for nghttp2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-2755.html" id="ALSA-2020-2755" type="self" title="ALSA-2020-2755"/>
      <reference href="https://vulners.com/cve/CVE-2020-11080" id="CVE-2020-11080" type="cve" title="CVE-2020-11080"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libnghttp2" version="1.33.0" release="3.el8_2.1" epoch="0" arch="aarch64" src="nghttp2-1.33.0-3.el8_2.1.src.rpm">
          <filename>libnghttp2-1.33.0-3.el8_2.1.aarch64.rpm</filename>
          <sum type="sha256">c212edaa9234b462da0f4b445466a65b3423bf39ae95a79a9d028922882c36cd</sum>
        </package>
        <package name="libnghttp2-devel" version="1.33.0" release="3.el8_2.1" epoch="0" arch="aarch64" src="nghttp2-1.33.0-3.el8_2.1.src.rpm">
          <filename>libnghttp2-devel-1.33.0-3.el8_2.1.aarch64.rpm</filename>
          <sum type="sha256">e0c2098672b447bf3bd43f0c4f8e47b2f1a41f481facc10e36f0545c074ee200</sum>
        </package>
        <package name="nghttp2" version="1.33.0" release="3.el8_2.1" epoch="0" arch="aarch64" src="nghttp2-1.33.0-3.el8_2.1.src.rpm">
          <filename>nghttp2-1.33.0-3.el8_2.1.aarch64.rpm</filename>
          <sum type="sha256">f2182dddfa7152dbe742573c2d11d16e5ffd5859f4100af906fd100b5366cef6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:3654</id>
    <title>Moderate: libcroco security update</title>
    <issued date="2020-09-08 08:36:30"/>
    <updated date="2020-09-08 08:36:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libcroco is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libcroco is a standalone Cascading Style Sheet level 2 (CSS2) parsing and manipulation library. 

Security Fix(es):

* libcroco: Stack overflow in function cr_parser_parse_any_core in cr-parser.c (CVE-2020-12825)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-3654.html" id="ALSA-2020-3654" type="self" title="ALSA-2020-3654"/>
      <reference href="https://vulners.com/cve/CVE-2020-12825" id="CVE-2020-12825" type="cve" title="CVE-2020-12825"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libcroco-devel" version="0.6.12" release="4.el8_2.1" epoch="0" arch="aarch64" src="libcroco-0.6.12-4.el8_2.1.src.rpm">
          <filename>libcroco-devel-0.6.12-4.el8_2.1.aarch64.rpm</filename>
          <sum type="sha256">a0b040bb48976fde2843c923a31eca04318ec9cefb3e7d8de256b423e3ad01b1</sum>
        </package>
        <package name="libcroco" version="0.6.12" release="4.el8_2.1" epoch="0" arch="aarch64" src="libcroco-0.6.12-4.el8_2.1.src.rpm">
          <filename>libcroco-0.6.12-4.el8_2.1.aarch64.rpm</filename>
          <sum type="sha256">f3bdd1daecafd47b451e84e862aa53a6f30b49058a78c7daf7c672df57e513e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="4">
    <id>ALSA-2020:4451</id>
    <title>Moderate: GNOME security, bug fix, and enhancement update</title>
    <issued date="2020-11-03 12:05:56"/>
    <updated date="2020-11-03 19:31:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>7</pushcount>
    <severity>Moderate</severity>
    <summary>An update for GNOME is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: gnome-remote-desktop (0.1.8), pipewire (0.3.6), vte291 (0.52.4), webkit2gtk3 (2.28.4), xdg-desktop-portal (1.6.0), xdg-desktop-portal-gtk (1.6.0). (BZ#1775345, BZ#1779691, BZ#1817143, BZ#1832347, BZ#1837406)

Security Fix(es):

* webkitgtk: Multiple security issues (CVE-2019-8625, CVE-2019-8710, CVE-2019-8720, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823, CVE-2019-8835, CVE-2019-8844, CVE-2019-8846, CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925, CVE-2020-10018, CVE-2020-11793)

* gnome-settings-daemon: AlmaLinux Customer Portal password logged and passed as command line argument when user registers through GNOME control center (CVE-2020-14391)

* LibRaw: lack of thumbnail size range check can lead to buffer overflow (CVE-2020-15503)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-4451.html" id="ALSA-2020-4451" type="self" title="ALSA-2020-4451"/>
      <reference href="https://vulners.com/cve/CVE-2019-8625" id="CVE-2019-8625" type="cve" title="CVE-2019-8625"/>
      <reference href="https://vulners.com/cve/CVE-2019-8710" id="CVE-2019-8710" type="cve" title="CVE-2019-8710"/>
      <reference href="https://vulners.com/cve/CVE-2019-8720" id="CVE-2019-8720" type="cve" title="CVE-2019-8720"/>
      <reference href="https://vulners.com/cve/CVE-2019-8743" id="CVE-2019-8743" type="cve" title="CVE-2019-8743"/>
      <reference href="https://vulners.com/cve/CVE-2019-8764" id="CVE-2019-8764" type="cve" title="CVE-2019-8764"/>
      <reference href="https://vulners.com/cve/CVE-2019-8766" id="CVE-2019-8766" type="cve" title="CVE-2019-8766"/>
      <reference href="https://vulners.com/cve/CVE-2019-8769" id="CVE-2019-8769" type="cve" title="CVE-2019-8769"/>
      <reference href="https://vulners.com/cve/CVE-2019-8771" id="CVE-2019-8771" type="cve" title="CVE-2019-8771"/>
      <reference href="https://vulners.com/cve/CVE-2019-8782" id="CVE-2019-8782" type="cve" title="CVE-2019-8782"/>
      <reference href="https://vulners.com/cve/CVE-2019-8783" id="CVE-2019-8783" type="cve" title="CVE-2019-8783"/>
      <reference href="https://vulners.com/cve/CVE-2019-8808" id="CVE-2019-8808" type="cve" title="CVE-2019-8808"/>
      <reference href="https://vulners.com/cve/CVE-2019-8811" id="CVE-2019-8811" type="cve" title="CVE-2019-8811"/>
      <reference href="https://vulners.com/cve/CVE-2019-8812" id="CVE-2019-8812" type="cve" title="CVE-2019-8812"/>
      <reference href="https://vulners.com/cve/CVE-2019-8813" id="CVE-2019-8813" type="cve" title="CVE-2019-8813"/>
      <reference href="https://vulners.com/cve/CVE-2019-8814" id="CVE-2019-8814" type="cve" title="CVE-2019-8814"/>
      <reference href="https://vulners.com/cve/CVE-2019-8815" id="CVE-2019-8815" type="cve" title="CVE-2019-8815"/>
      <reference href="https://vulners.com/cve/CVE-2019-8816" id="CVE-2019-8816" type="cve" title="CVE-2019-8816"/>
      <reference href="https://vulners.com/cve/CVE-2019-8819" id="CVE-2019-8819" type="cve" title="CVE-2019-8819"/>
      <reference href="https://vulners.com/cve/CVE-2019-8820" id="CVE-2019-8820" type="cve" title="CVE-2019-8820"/>
      <reference href="https://vulners.com/cve/CVE-2019-8823" id="CVE-2019-8823" type="cve" title="CVE-2019-8823"/>
      <reference href="https://vulners.com/cve/CVE-2019-8835" id="CVE-2019-8835" type="cve" title="CVE-2019-8835"/>
      <reference href="https://vulners.com/cve/CVE-2019-8844" id="CVE-2019-8844" type="cve" title="CVE-2019-8844"/>
      <reference href="https://vulners.com/cve/CVE-2019-8846" id="CVE-2019-8846" type="cve" title="CVE-2019-8846"/>
      <reference href="https://vulners.com/cve/CVE-2020-10018" id="CVE-2020-10018" type="cve" title="CVE-2020-10018"/>
      <reference href="https://vulners.com/cve/CVE-2020-11793" id="CVE-2020-11793" type="cve" title="CVE-2020-11793"/>
      <reference href="https://vulners.com/cve/CVE-2020-14391" id="CVE-2020-14391" type="cve" title="CVE-2020-14391"/>
      <reference href="https://vulners.com/cve/CVE-2020-15503" id="CVE-2020-15503" type="cve" title="CVE-2020-15503"/>
      <reference href="https://vulners.com/cve/CVE-2020-3862" id="CVE-2020-3862" type="cve" title="CVE-2020-3862"/>
      <reference href="https://vulners.com/cve/CVE-2020-3864" id="CVE-2020-3864" type="cve" title="CVE-2020-3864"/>
      <reference href="https://vulners.com/cve/CVE-2020-3865" id="CVE-2020-3865" type="cve" title="CVE-2020-3865"/>
      <reference href="https://vulners.com/cve/CVE-2020-3867" id="CVE-2020-3867" type="cve" title="CVE-2020-3867"/>
      <reference href="https://vulners.com/cve/CVE-2020-3868" id="CVE-2020-3868" type="cve" title="CVE-2020-3868"/>
      <reference href="https://vulners.com/cve/CVE-2020-3885" id="CVE-2020-3885" type="cve" title="CVE-2020-3885"/>
      <reference href="https://vulners.com/cve/CVE-2020-3894" id="CVE-2020-3894" type="cve" title="CVE-2020-3894"/>
      <reference href="https://vulners.com/cve/CVE-2020-3895" id="CVE-2020-3895" type="cve" title="CVE-2020-3895"/>
      <reference href="https://vulners.com/cve/CVE-2020-3897" id="CVE-2020-3897" type="cve" title="CVE-2020-3897"/>
      <reference href="https://vulners.com/cve/CVE-2020-3899" id="CVE-2020-3899" type="cve" title="CVE-2020-3899"/>
      <reference href="https://vulners.com/cve/CVE-2020-3900" id="CVE-2020-3900" type="cve" title="CVE-2020-3900"/>
      <reference href="https://vulners.com/cve/CVE-2020-3901" id="CVE-2020-3901" type="cve" title="CVE-2020-3901"/>
      <reference href="https://vulners.com/cve/CVE-2020-3902" id="CVE-2020-3902" type="cve" title="CVE-2020-3902"/>
      <reference href="https://vulners.com/cve/CVE-2020-9802" id="CVE-2020-9802" type="cve" title="CVE-2020-9802"/>
      <reference href="https://vulners.com/cve/CVE-2020-9803" id="CVE-2020-9803" type="cve" title="CVE-2020-9803"/>
      <reference href="https://vulners.com/cve/CVE-2020-9805" id="CVE-2020-9805" type="cve" title="CVE-2020-9805"/>
      <reference href="https://vulners.com/cve/CVE-2020-9806" id="CVE-2020-9806" type="cve" title="CVE-2020-9806"/>
      <reference href="https://vulners.com/cve/CVE-2020-9807" id="CVE-2020-9807" type="cve" title="CVE-2020-9807"/>
      <reference href="https://vulners.com/cve/CVE-2020-9843" id="CVE-2020-9843" type="cve" title="CVE-2020-9843"/>
      <reference href="https://vulners.com/cve/CVE-2020-9850" id="CVE-2020-9850" type="cve" title="CVE-2020-9850"/>
      <reference href="https://vulners.com/cve/CVE-2020-9862" id="CVE-2020-9862" type="cve" title="CVE-2020-9862"/>
      <reference href="https://vulners.com/cve/CVE-2020-9893" id="CVE-2020-9893" type="cve" title="CVE-2020-9893"/>
      <reference href="https://vulners.com/cve/CVE-2020-9894" id="CVE-2020-9894" type="cve" title="CVE-2020-9894"/>
      <reference href="https://vulners.com/cve/CVE-2020-9895" id="CVE-2020-9895" type="cve" title="CVE-2020-9895"/>
      <reference href="https://vulners.com/cve/CVE-2020-9915" id="CVE-2020-9915" type="cve" title="CVE-2020-9915"/>
      <reference href="https://vulners.com/cve/CVE-2020-9925" id="CVE-2020-9925" type="cve" title="CVE-2020-9925"/>
      <reference href="https://vulners.com/cve/CVE-2020-9952" id="CVE-2020-9952" type="cve" title="CVE-2020-9952"/>
      <reference href="https://vulners.com/cve/CVE-2021-30666" id="CVE-2021-30666" type="cve" title="CVE-2021-30666"/>
      <reference href="https://vulners.com/cve/CVE-2021-30761" id="CVE-2021-30761" type="cve" title="CVE-2021-30761"/>
      <reference href="https://vulners.com/cve/CVE-2021-30762" id="CVE-2021-30762" type="cve" title="CVE-2021-30762"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="PackageKit-glib-devel" version="1.1.12" release="6.el8" epoch="0" arch="aarch64" src="PackageKit-1.1.12-6.el8.src.rpm">
          <filename>PackageKit-glib-devel-1.1.12-6.el8.aarch64.rpm</filename>
          <sum type="sha256">0830fd94c3a73990234b7f3b4b82e696be25e3d8d9b29c7d428de47fad00f9a2</sum>
        </package>
        <package name="tracker-devel" version="2.1.5" release="2.el8" epoch="0" arch="aarch64" src="tracker-2.1.5-2.el8.src.rpm">
          <filename>tracker-devel-2.1.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">52ffb9d0b9b8b77eb8d5cda32ee96f044c90b9eea3ee2da491cc0cc038d2e255</sum>
        </package>
        <package name="pygobject3-devel" version="3.28.3" release="2.el8" epoch="0" arch="aarch64" src="pygobject3-3.28.3-2.el8.src.rpm">
          <filename>pygobject3-devel-3.28.3-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9645c99c5e913e0c27094af5906e61c615a0c62ece2f1c1eaa0f82c091b299ee</sum>
        </package>
        <package name="frei0r-devel" version="1.6.1" release="7.el8" epoch="0" arch="aarch64" src="frei0r-plugins-1.6.1-7.el8.src.rpm">
          <filename>frei0r-devel-1.6.1-7.el8.aarch64.rpm</filename>
          <sum type="sha256">cf09a9309861abc21dbd1ab9b802d39f848954d0ef3407f8186bece1c9c27235</sum>
        </package>
        <package name="vte291-devel" version="0.52.4" release="2.el8" epoch="0" arch="aarch64" src="vte291-0.52.4-2.el8.src.rpm">
          <filename>vte291-devel-0.52.4-2.el8.aarch64.rpm</filename>
          <sum type="sha256">dd9727927559e2806a542d4bb95dc6bf8b2cfbbbfc661b7ba680ae815698e800</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2020:4539</id>
    <title>Moderate: pcre2 security and enhancement update</title>
    <issued date="2020-11-03 12:13:54"/>
    <updated date="2020-11-03 19:38:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for pcre2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. 

Security Fix(es):

* pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-4539.html" id="ALSA-2020-4539" type="self" title="ALSA-2020-4539"/>
      <reference href="https://vulners.com/cve/CVE-2019-20454" id="CVE-2019-20454" type="cve" title="CVE-2019-20454"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="pcre2-utf32" version="10.32" release="2.el8" epoch="0" arch="aarch64" src="pcre2-10.32-2.el8.src.rpm">
          <filename>pcre2-utf32-10.32-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0acce01a42792cba7449f51e116f8be4fdb67e315dd12ef06110d4f03d3e2845</sum>
        </package>
        <package name="pcre2" version="10.32" release="2.el8" epoch="0" arch="aarch64" src="pcre2-10.32-2.el8.src.rpm">
          <filename>pcre2-10.32-2.el8.aarch64.rpm</filename>
          <sum type="sha256">81d39a354a10c5ad54f1582aae1f30be7fdb9a8029ca826ec0c698927a4e28a8</sum>
        </package>
        <package name="pcre2-utf16" version="10.32" release="2.el8" epoch="0" arch="aarch64" src="pcre2-10.32-2.el8.src.rpm">
          <filename>pcre2-utf16-10.32-2.el8.aarch64.rpm</filename>
          <sum type="sha256">82cad17f7e8ae5a4079e0ce4fff3a31a347e2b6cdf36ddd5fa4ee37253be157e</sum>
        </package>
        <package name="pcre2-devel" version="10.32" release="2.el8" epoch="0" arch="aarch64" src="pcre2-10.32-2.el8.src.rpm">
          <filename>pcre2-devel-10.32-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b977eaab7b914978f4ca6ea1494e5b970e5909b356172cdb6e9cb619973e246e</sum>
        </package>
        <package name="pcre2-tools" version="10.32" release="2.el8" epoch="0" arch="aarch64" src="pcre2-10.32-2.el8.src.rpm">
          <filename>pcre2-tools-10.32-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e3ca860ccf34c24df3afd7d01da2159ef7a0fea826787a80f91d6c06b1bcd711</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2020:4629</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2020-11-03 12:21:50"/>
    <updated date="2020-11-03 19:45:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libvpx is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)

* libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

* libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)

* libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-4629.html" id="ALSA-2020-4629" type="self" title="ALSA-2020-4629"/>
      <reference href="https://vulners.com/cve/CVE-2019-2126" id="CVE-2019-2126" type="cve" title="CVE-2019-2126"/>
      <reference href="https://vulners.com/cve/CVE-2019-9232" id="CVE-2019-9232" type="cve" title="CVE-2019-9232"/>
      <reference href="https://vulners.com/cve/CVE-2019-9371" id="CVE-2019-9371" type="cve" title="CVE-2019-9371"/>
      <reference href="https://vulners.com/cve/CVE-2019-9433" id="CVE-2019-9433" type="cve" title="CVE-2019-9433"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libvpx" version="1.7.0" release="8.el8" epoch="0" arch="aarch64" src="libvpx-1.7.0-8.el8.src.rpm">
          <filename>libvpx-1.7.0-8.el8.aarch64.rpm</filename>
          <sum type="sha256">598091c58f10f45c446625448266f36287723834c0f55d46599f02d3c4111aea</sum>
        </package>
        <package name="libvpx-devel" version="1.7.0" release="8.el8" epoch="0" arch="aarch64" src="libvpx-1.7.0-8.el8.src.rpm">
          <filename>libvpx-devel-1.7.0-8.el8.aarch64.rpm</filename>
          <sum type="sha256">898547a9d592ca2d8ebf25a724bce6af341889efc16d0bc09fe8cdcb81290917</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2020:4689</id>
    <title>Moderate: openwsman security update</title>
    <issued date="2020-11-03 12:27:08"/>
    <updated date="2020-11-03 19:50:20"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Moderate</severity>
    <summary>An update for openwsman is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects.

Security Fix(es):

* openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-4689.html" id="ALSA-2020-4689" type="self" title="ALSA-2020-4689"/>
      <reference href="https://vulners.com/cve/CVE-2019-3833" id="CVE-2019-3833" type="cve" title="CVE-2019-3833"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="openwsman-server" version="2.6.5" release="7.el8" epoch="0" arch="aarch64" src="openwsman-2.6.5-7.el8.src.rpm">
          <filename>openwsman-server-2.6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">10f77dee17e4ce69e89c39c63232003875098fa5c4a6a83a7326fac9c576412d</sum>
        </package>
        <package name="openwsman-python3" version="2.6.5" release="7.el8" epoch="0" arch="aarch64" src="openwsman-2.6.5-7.el8.src.rpm">
          <filename>openwsman-python3-2.6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">65d0212f9b16e8e3c38df4e5b84388270449358ae1079272f10e1f17e2cbd5ee</sum>
        </package>
        <package name="openwsman-client" version="2.6.5" release="7.el8" epoch="0" arch="aarch64" src="openwsman-2.6.5-7.el8.src.rpm">
          <filename>openwsman-client-2.6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">a8c520ec6367da348d86f038c700de87132201efc94e595f006879e151a5188f</sum>
        </package>
        <package name="libwsman1" version="2.6.5" release="7.el8" epoch="0" arch="aarch64" src="openwsman-2.6.5-7.el8.src.rpm">
          <filename>libwsman1-2.6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">c7e6a802a847000dc9ce51a0371617e4a5ed067efaba4308822284c0c08b0050</sum>
        </package>
        <package name="libwsman-devel" version="2.6.5" release="7.el8" epoch="0" arch="aarch64" src="openwsman-2.6.5-7.el8.src.rpm">
          <filename>libwsman-devel-2.6.5-7.el8.aarch64.rpm</filename>
          <sum type="sha256">d90b381b34ee9e239f2e1362f72efbeb5533372d50b7e55c6d555bc0439f060a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2020:4827</id>
    <title>Moderate: oniguruma security update</title>
    <issued date="2020-11-03 12:39:14"/>
    <updated date="2020-11-03 20:01:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for oniguruma is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Oniguruma is a regular expressions library that supports a variety of character encodings. 

Security Fix(es):

* oniguruma: NULL pointer dereference in match_at() in regexec.c (CVE-2019-13225)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-4827.html" id="ALSA-2020-4827" type="self" title="ALSA-2020-4827"/>
      <reference href="https://vulners.com/cve/CVE-2019-13225" id="CVE-2019-13225" type="cve" title="CVE-2019-13225"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="oniguruma" version="6.8.2" release="2.el8" epoch="0" arch="aarch64" src="oniguruma-6.8.2-2.el8.src.rpm">
          <filename>oniguruma-6.8.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4c698aa447aa904a2a9b88077ddacc421087ce655183021bc025a96e08e6c84f</sum>
        </package>
        <package name="oniguruma-devel" version="6.8.2" release="2.el8" epoch="0" arch="aarch64" src="oniguruma-6.8.2-2.el8.src.rpm">
          <filename>oniguruma-devel-6.8.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4c8611499bcdcf4dcc947bb22f05b811024a987e696215149daaf8011ef27eb5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2020:5393</id>
    <title>Important: libexif security update</title>
    <issued date="2020-12-14 11:19:49"/>
    <updated date="2020-12-14 11:19:49"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Important</severity>
    <summary>An update for libexif is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libexif packages provide a library for extracting extra information from image files.

Security Fix(es):

* libexif: out of bounds write due to an integer overflow in exif-entry.c (CVE-2020-0452)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2020-5393.html" id="ALSA-2020-5393" type="self" title="ALSA-2020-5393"/>
      <reference href="https://vulners.com/cve/CVE-2020-0452" id="CVE-2020-0452" type="cve" title="CVE-2020-0452"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libexif" version="0.6.22" release="5.el8_3" epoch="0" arch="aarch64" src="libexif-0.6.22-5.el8_3.src.rpm">
          <filename>libexif-0.6.22-5.el8_3.aarch64.rpm</filename>
          <sum type="sha256">a13b4f0c6bcc9080f74d79794ed0313e7d46bab52a4bac9ef8b8d1fd800d0808</sum>
        </package>
        <package name="libexif-devel" version="0.6.22" release="5.el8_3" epoch="0" arch="aarch64" src="libexif-0.6.22-5.el8_3.src.rpm">
          <filename>libexif-devel-0.6.22-5.el8_3.aarch64.rpm</filename>
          <sum type="sha256">bc0c32c911431eda09a81a5d8729035b8fd2a802c40dc4819b2c20f7b362e09e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1242</id>
    <title>Important: mariadb:10.3 and mariadb-devel:10.3 security update</title>
    <issued date="2021-04-19 09:38:10"/>
    <updated date="2021-04-19 09:38:10"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Important</severity>
    <summary>An update for the mariadb:10.3 and mariadb-devel:10.3 modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. 

The following packages have been upgraded to a later upstream version: mariadb (10.3.28), galera (25.3.32).

Security Fix(es):

* mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user (CVE-2021-27928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1242.html" id="ALSA-2021-1242" type="self" title="ALSA-2021-1242"/>
      <reference href="https://vulners.com/cve/CVE-2021-27928" id="CVE-2021-27928" type="cve" title="CVE-2021-27928"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_mariadb-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_mariadb-devel</name>
        <module name="mariadb-devel" stream="10.3" version="8060020220503130727" context="9edba152" arch="aarch64"/>
        <package name="asio-devel" version="1.10.8" release="7.module_el8.6.0+2867+72759d2f" epoch="0" arch="aarch64" src="asio-1.10.8-7.module_el8.6.0+2867+72759d2f.src.rpm">
          <filename>asio-devel-1.10.8-7.module_el8.6.0+2867+72759d2f.aarch64.rpm</filename>
          <sum type="sha256">63fc351fbcd03176401f95f16cebd29b23066a2a8c21696f72a9f8c2e916b4b3</sum>
        </package>
        <package name="Judy-devel" version="1.0.5" release="18.module_el8.6.0+2867+72759d2f" epoch="0" arch="aarch64" src="Judy-1.0.5-18.module_el8.6.0+2867+72759d2f.src.rpm">
          <filename>Judy-devel-1.0.5-18.module_el8.6.0+2867+72759d2f.aarch64.rpm</filename>
          <sum type="sha256">93d0e21e8df7e2b686fe949792b8587fbe3436ee13cc46cd539a1a73684fa5d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2021:1586</id>
    <title>Moderate: GNOME security, bug fix, and enhancement update</title>
    <issued date="2021-05-18 05:35:26"/>
    <updated date="2021-05-18 05:35:07"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>7</pushcount>
    <severity>Moderate</severity>
    <summary>An update for GNOME is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: accountsservice (0.6.55), webkit2gtk3 (2.30.4). (BZ#1846376, BZ#1883304)

Security Fix(es):

* webkitgtk: type confusion may lead to arbitrary code execution (CVE-2020-9948)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-9951)

* webkitgtk: out-of-bounds write may lead to code execution (CVE-2020-9983)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13543)

* webkitgtk: use-after-free may lead to arbitrary code execution (CVE-2020-13584)

* glib2: insecure permissions for files and directories (CVE-2019-13012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1586.html" id="ALSA-2021-1586" type="self" title="ALSA-2021-1586"/>
      <reference href="https://vulners.com/cve/CVE-2019-13012" id="CVE-2019-13012" type="cve" title="CVE-2019-13012"/>
      <reference href="https://vulners.com/cve/CVE-2020-13543" id="CVE-2020-13543" type="cve" title="CVE-2020-13543"/>
      <reference href="https://vulners.com/cve/CVE-2020-13584" id="CVE-2020-13584" type="cve" title="CVE-2020-13584"/>
      <reference href="https://vulners.com/cve/CVE-2020-16125" id="CVE-2020-16125" type="cve" title="CVE-2020-16125"/>
      <reference href="https://vulners.com/cve/CVE-2020-9948" id="CVE-2020-9948" type="cve" title="CVE-2020-9948"/>
      <reference href="https://vulners.com/cve/CVE-2020-9951" id="CVE-2020-9951" type="cve" title="CVE-2020-9951"/>
      <reference href="https://vulners.com/cve/CVE-2020-9983" id="CVE-2020-9983" type="cve" title="CVE-2020-9983"/>
      <reference href="https://vulners.com/cve/CVE-2021-1817" id="CVE-2021-1817" type="cve" title="CVE-2021-1817"/>
      <reference href="https://vulners.com/cve/CVE-2021-1820" id="CVE-2021-1820" type="cve" title="CVE-2021-1820"/>
      <reference href="https://vulners.com/cve/CVE-2021-1825" id="CVE-2021-1825" type="cve" title="CVE-2021-1825"/>
      <reference href="https://vulners.com/cve/CVE-2021-1826" id="CVE-2021-1826" type="cve" title="CVE-2021-1826"/>
      <reference href="https://vulners.com/cve/CVE-2021-30661" id="CVE-2021-30661" type="cve" title="CVE-2021-30661"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="glibmm24-devel" version="2.56.0" release="2.el8" epoch="0" arch="aarch64" src="glibmm24-2.56.0-2.el8.src.rpm">
          <filename>glibmm24-devel-2.56.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0082ea838821076b4b4b90739fb82045ffe0e05afdc5261da152c3fc09644dc8</sum>
        </package>
        <package name="libdazzle-devel" version="3.28.5" release="2.el8" epoch="0" arch="aarch64" src="libdazzle-3.28.5-2.el8.src.rpm">
          <filename>libdazzle-devel-3.28.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0ee3c1768c98846ab1c693aa92ddb04960db0f61122cf4942aef565a85e7f8dd</sum>
        </package>
        <package name="geoclue2-devel" version="2.5.5" release="2.el8" epoch="0" arch="aarch64" src="geoclue2-2.5.5-2.el8.src.rpm">
          <filename>geoclue2-devel-2.5.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">14ad2e21f23effacf97b8ab7453acbe57b770cd5c0e70043cf26924c350d79a2</sum>
        </package>
        <package name="pangomm-devel" version="2.40.1" release="6.el8" epoch="0" arch="aarch64" src="pangomm-2.40.1-6.el8.src.rpm">
          <filename>pangomm-devel-2.40.1-6.el8.aarch64.rpm</filename>
          <sum type="sha256">18e499f69fd79aa61d708a15dbbcb9de47fa4f7682a198ee8f1802d9a5878fcd</sum>
        </package>
        <package name="cairomm-devel" version="1.12.0" release="8.el8" epoch="0" arch="aarch64" src="cairomm-1.12.0-8.el8.src.rpm">
          <filename>cairomm-devel-1.12.0-8.el8.aarch64.rpm</filename>
          <sum type="sha256">2efd7593eb7af7216a3abb095a6f9f8450e1a3b269d7f399de63f30f2c182f73</sum>
        </package>
        <package name="OpenEXR-devel" version="2.2.0" release="12.el8" epoch="0" arch="aarch64" src="OpenEXR-2.2.0-12.el8.src.rpm">
          <filename>OpenEXR-devel-2.2.0-12.el8.aarch64.rpm</filename>
          <sum type="sha256">31c35acee859b51730bbbe47fecba226eda5f6b1366522130e47acf0f3fba827</sum>
        </package>
        <package name="atkmm-doc" version="2.24.2" release="7.el8" epoch="0" arch="noarch" src="atkmm-2.24.2-7.el8.src.rpm">
          <filename>atkmm-doc-2.24.2-7.el8.noarch.rpm</filename>
          <sum type="sha256">32da3c070956adcb7ec5fe547f957936c11e26e401106cd1e1d4b0a42bbbc981</sum>
        </package>
        <package name="woff2-devel" version="1.0.2" release="5.el8" epoch="0" arch="aarch64" src="woff2-1.0.2-5.el8.src.rpm">
          <filename>woff2-devel-1.0.2-5.el8.aarch64.rpm</filename>
          <sum type="sha256">3bf30b573f77bf9871470beef7089e74ff437dde98ba059bd600da53ea0cfc5f</sum>
        </package>
        <package name="libdazzle" version="3.28.5" release="2.el8" epoch="0" arch="aarch64" src="libdazzle-3.28.5-2.el8.src.rpm">
          <filename>libdazzle-3.28.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3c42f000c21e91845ebf67c6c5c5ca09df85407af4006eb30a418a1c14c58e7a</sum>
        </package>
        <package name="atkmm-devel" version="2.24.2" release="7.el8" epoch="0" arch="aarch64" src="atkmm-2.24.2-7.el8.src.rpm">
          <filename>atkmm-devel-2.24.2-7.el8.aarch64.rpm</filename>
          <sum type="sha256">401f734ebe10ea1bdc98b79b97466c9020e6ef1df988951a4fd3a3338ebd3141</sum>
        </package>
        <package name="gtk-doc" version="1.28" release="3.el8" epoch="0" arch="aarch64" src="gtk-doc-1.28-3.el8.src.rpm">
          <filename>gtk-doc-1.28-3.el8.aarch64.rpm</filename>
          <sum type="sha256">53fbd676cd158315c05938d45e0e89b967ae403da875d65e86838334153a4649</sum>
        </package>
        <package name="libsigc++20-devel" version="2.10.0" release="6.el8" epoch="0" arch="aarch64" src="libsigc++20-2.10.0-6.el8.src.rpm">
          <filename>libsigc++20-devel-2.10.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">568b42bd049f063439522d189b867b881efe4cba3231e4d1cd3db733377a4a8d</sum>
        </package>
        <package name="libvisual-devel" version="0.4.0" release="25.el8" epoch="1" arch="aarch64" src="libvisual-0.4.0-25.el8.src.rpm">
          <filename>libvisual-devel-0.4.0-25.el8.aarch64.rpm</filename>
          <sum type="sha256">64f24fff37a14471261b4c2dcb335d9968b37ed6b2326f9978bed59b6ffa7bdc</sum>
        </package>
        <package name="vala" version="0.40.19" release="2.el8" epoch="0" arch="aarch64" src="vala-0.40.19-2.el8.src.rpm">
          <filename>vala-0.40.19-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6ef5e9d72cd271240746bf557df711d8ab57881a282f30937c074a26e6e3eeea</sum>
        </package>
        <package name="enchant2-devel" version="2.2.3" release="3.el8" epoch="0" arch="aarch64" src="enchant2-2.2.3-3.el8.src.rpm">
          <filename>enchant2-devel-2.2.3-3.el8.aarch64.rpm</filename>
          <sum type="sha256">6f2aa435dd60e62497966fc4c4fc9465551e911a9fb891bc4968ab69dfd16d42</sum>
        </package>
        <package name="pangomm-doc" version="2.40.1" release="6.el8" epoch="0" arch="noarch" src="pangomm-2.40.1-6.el8.src.rpm">
          <filename>pangomm-doc-2.40.1-6.el8.noarch.rpm</filename>
          <sum type="sha256">72b1a494752737554dd1b03a321bd14541613dc625ee492a4c64f67acf22fee7</sum>
        </package>
        <package name="libsass-devel" version="3.4.5" release="6.el8" epoch="0" arch="aarch64" src="libsass-3.4.5-6.el8.src.rpm">
          <filename>libsass-devel-3.4.5-6.el8.aarch64.rpm</filename>
          <sum type="sha256">7eeda69a1bf39956b1520ca71a2ab2c2e021adbee2b2f2fdd7992d5f185229da</sum>
        </package>
        <package name="soundtouch-devel" version="2.0.0" release="3.el8" epoch="0" arch="aarch64" src="soundtouch-2.0.0-3.el8.src.rpm">
          <filename>soundtouch-devel-2.0.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">7f1567d32a233b22a417b63e443b9abd29798ab47b10fa08cdef1130945acaf2</sum>
        </package>
        <package name="gtkmm30-doc" version="3.22.2" release="3.el8" epoch="0" arch="noarch" src="gtkmm30-3.22.2-3.el8.src.rpm">
          <filename>gtkmm30-doc-3.22.2-3.el8.noarch.rpm</filename>
          <sum type="sha256">838d9437c59a0a5dcc11752f2d615a16b282fb0093ed01047da8fcb3ab181d64</sum>
        </package>
        <package name="glibmm24-doc" version="2.56.0" release="2.el8" epoch="0" arch="noarch" src="glibmm24-2.56.0-2.el8.src.rpm">
          <filename>glibmm24-doc-2.56.0-2.el8.noarch.rpm</filename>
          <sum type="sha256">a6fb154f2d7710a870b7efae7667771d82fad0e8dca9f8c88efe2286bc5836eb</sum>
        </package>
        <package name="nautilus-devel" version="3.28.1" release="15.el8" epoch="0" arch="aarch64" src="nautilus-3.28.1-15.el8.src.rpm">
          <filename>nautilus-devel-3.28.1-15.el8.aarch64.rpm</filename>
          <sum type="sha256">b97b866137c60cc3bb5d7d04fefdd5d8e6119c1fe13e371667536770cc8f1108</sum>
        </package>
        <package name="vala-devel" version="0.40.19" release="2.el8" epoch="0" arch="aarch64" src="vala-0.40.19-2.el8.src.rpm">
          <filename>vala-devel-0.40.19-2.el8.aarch64.rpm</filename>
          <sum type="sha256">bedd9fb5ab086d31f204de30d7d28652d1ff7aa342e9556474779350612bc12b</sum>
        </package>
        <package name="cairomm-doc" version="1.12.0" release="8.el8" epoch="0" arch="noarch" src="cairomm-1.12.0-8.el8.src.rpm">
          <filename>cairomm-doc-1.12.0-8.el8.noarch.rpm</filename>
          <sum type="sha256">c0d2e86db66a2535f6cc4cf530226e0cb4a3aab436804723add4feb7c8d35a25</sum>
        </package>
        <package name="gtkmm30-devel" version="3.22.2" release="3.el8" epoch="0" arch="aarch64" src="gtkmm30-3.22.2-3.el8.src.rpm">
          <filename>gtkmm30-devel-3.22.2-3.el8.aarch64.rpm</filename>
          <sum type="sha256">c575b641479ab954ab390e697b0cbe185dea2cd115b88d1a0443edad983945c1</sum>
        </package>
        <package name="libsigc++20-doc" version="2.10.0" release="6.el8" epoch="0" arch="noarch" src="libsigc++20-2.10.0-6.el8.src.rpm">
          <filename>libsigc++20-doc-2.10.0-6.el8.noarch.rpm</filename>
          <sum type="sha256">ce564a74dbd28bf47584a702b85f2b1f00b926fd8db3b38ed7887d87fbe22462</sum>
        </package>
        <package name="libepubgen-devel" version="0.1.0" release="3.el8" epoch="0" arch="aarch64" src="libepubgen-0.1.0-3.el8.src.rpm">
          <filename>libepubgen-devel-0.1.0-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d328b6999a3b6e9ffedc2914bbf351d48dfaf5c4c289077ef04f5afc264741c8</sum>
        </package>
        <package name="gjs-devel" version="1.56.2" release="5.el8" epoch="0" arch="aarch64" src="gjs-1.56.2-5.el8.src.rpm">
          <filename>gjs-devel-1.56.2-5.el8.aarch64.rpm</filename>
          <sum type="sha256">d8dc3cb2f0e7c74436de8fdee8629de5ffa8d653a1942f61afa886adcbc06a7d</sum>
        </package>
        <package name="gtkmm24-devel" version="2.24.5" release="6.el8" epoch="0" arch="aarch64" src="gtkmm24-2.24.5-6.el8.src.rpm">
          <filename>gtkmm24-devel-2.24.5-6.el8.aarch64.rpm</filename>
          <sum type="sha256">e1cdcae29d648eed2467755b16a1977438f0e1eb27306f2edb24d85858ffd235</sum>
        </package>
        <package name="libsass" version="3.4.5" release="6.el8" epoch="0" arch="aarch64" src="libsass-3.4.5-6.el8.src.rpm">
          <filename>libsass-3.4.5-6.el8.aarch64.rpm</filename>
          <sum type="sha256">e2ba1ef081384f5bb1d5b1de4534271c51ddbb740f821e05e8239891ff605b20</sum>
        </package>
        <package name="gtkmm24-docs" version="2.24.5" release="6.el8" epoch="0" arch="noarch" src="gtkmm24-2.24.5-6.el8.src.rpm">
          <filename>gtkmm24-docs-2.24.5-6.el8.noarch.rpm</filename>
          <sum type="sha256">ec2bcfd210f07b22d6b4af7c42dc4fb8cfb6aca17530d852dc8dfb6d50d6c535</sum>
        </package>
        <package name="gamin-devel" version="0.1.10" release="32.el8" epoch="0" arch="aarch64" src="gamin-0.1.10-32.el8.src.rpm">
          <filename>gamin-devel-0.1.10-32.el8.aarch64.rpm</filename>
          <sum type="sha256">f9033d58487359336f2e810f67c2f94f7742dea18746969ed51be4b12c657c07</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1627</id>
    <title>Moderate: trousers security, bug fix, and enhancement update</title>
    <issued date="2021-05-18 05:41:50"/>
    <updated date="2021-05-18 05:41:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Moderate</severity>
    <summary>An update for TrouSerS is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>TrouSerS is an implementation of the Trusted Computing Group's Software Stack (TSS) specification. TrouSerS enables the user to write applications that make use of the Trusted Platform Module (TPM) hardware.

The following packages have been upgraded to a later upstream version: trousers (0.3.15). (BZ#1725782)

Security Fix(es):

* trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root (CVE-2020-24331)

* trousers: tss user can be used to create or corrupt existing files, this could lead to DoS (CVE-2020-24332)

* trousers: fails to drop the root gid privilege when no longer needed (CVE-2020-24330)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1627.html" id="ALSA-2021-1627" type="self" title="ALSA-2021-1627"/>
      <reference href="https://vulners.com/cve/CVE-2020-24330" id="CVE-2020-24330" type="cve" title="CVE-2020-24330"/>
      <reference href="https://vulners.com/cve/CVE-2020-24331" id="CVE-2020-24331" type="cve" title="CVE-2020-24331"/>
      <reference href="https://vulners.com/cve/CVE-2020-24332" id="CVE-2020-24332" type="cve" title="CVE-2020-24332"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="trousers" version="0.3.15" release="1.el8" epoch="0" arch="aarch64" src="trousers-0.3.15-1.el8.src.rpm">
          <filename>trousers-0.3.15-1.el8.aarch64.rpm</filename>
          <sum type="sha256">126400510c072ab32fcb9eaf86a7e47a8b1b6e2aa6b1788e7addb2bc5900faf0</sum>
        </package>
        <package name="trousers-lib" version="0.3.15" release="1.el8" epoch="0" arch="aarch64" src="trousers-0.3.15-1.el8.src.rpm">
          <filename>trousers-lib-0.3.15-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2b019f87be71acc90cbadb968e0e166880c8c1463d0f25dafb1a1b0586c19993</sum>
        </package>
        <package name="trousers-devel" version="0.3.15" release="1.el8" epoch="0" arch="aarch64" src="trousers-0.3.15-1.el8.src.rpm">
          <filename>trousers-devel-0.3.15-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ca6f1871fb3f3ad03ef57c20185c282dc74b9dabff65e8f72e250d98a3307f33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1734</id>
    <title>Moderate: shim security update</title>
    <issued date="2021-05-18 05:57:10"/>
    <updated date="2021-05-18 05:56:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for shim, shim-unsigned-aarch64, and shim-unsigned-x64 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The shim package contains a first-stage UEFI boot loader that handles chaining to a trusted full boot loader under secure boot environments.

Security Fix(es):

* grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled (CVE-2020-14372)

* grub2: Use-after-free in rmmod command (CVE-2020-25632)

* grub2: Out-of-bounds write in grub_usb_device_initialize() (CVE-2020-25647)

* grub2: Stack buffer overflow in grub_parser_split_cmdline() (CVE-2020-27749)

* grub2: cutmem command allows privileged user to remove memory regions when Secure Boot is enabled (CVE-2020-27779)

* grub2: Heap out-of-bounds write in short form option parser (CVE-2021-20225)

* grub2: Heap out-of-bounds write due to miscalculation of space required for quoting (CVE-2021-20233)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1734.html" id="ALSA-2021-1734" type="self" title="ALSA-2021-1734"/>
      <reference href="https://vulners.com/cve/CVE-2020-14372" id="CVE-2020-14372" type="cve" title="CVE-2020-14372"/>
      <reference href="https://vulners.com/cve/CVE-2020-25632" id="CVE-2020-25632" type="cve" title="CVE-2020-25632"/>
      <reference href="https://vulners.com/cve/CVE-2020-25647" id="CVE-2020-25647" type="cve" title="CVE-2020-25647"/>
      <reference href="https://vulners.com/cve/CVE-2020-27749" id="CVE-2020-27749" type="cve" title="CVE-2020-27749"/>
      <reference href="https://vulners.com/cve/CVE-2020-27779" id="CVE-2020-27779" type="cve" title="CVE-2020-27779"/>
      <reference href="https://vulners.com/cve/CVE-2021-20225" id="CVE-2021-20225" type="cve" title="CVE-2021-20225"/>
      <reference href="https://vulners.com/cve/CVE-2021-20233" id="CVE-2021-20233" type="cve" title="CVE-2021-20233"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="shim-aa64" version="15.4" release="2.el8_1.alma" epoch="0" arch="aarch64" src="shim-15.4-2.el8_1.alma.src.rpm">
          <filename>shim-aa64-15.4-2.el8_1.alma.aarch64.rpm</filename>
          <sum type="sha256">6cfb21a2513e1cf3faea077e09b42277bd84a53dd4221db8548af8ab6aa43764</sum>
        </package>
        <package name="shim-unsigned-aarch64" version="15" release="7.el8_1.alma" epoch="0" arch="aarch64" src="shim-unsigned-aarch64-15-7.el8_1.alma.src.rpm">
          <filename>shim-unsigned-aarch64-15-7.el8_1.alma.aarch64.rpm</filename>
          <sum type="sha256">c6c12853b775dd0f70ef7668c987157d301c3c667e50f65db887a26fd7a022e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1789</id>
    <title>Moderate: gssdp and gupnp security update</title>
    <issued date="2021-05-18 06:05:22"/>
    <updated date="2021-05-18 06:05:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for gssdp and gupnp is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible.

GSSDP implements resource discovery and announcement over SSDP and is part of gUPnP. 

The following packages have been upgraded to a later upstream version: gssdp (1.0.5), gupnp (1.0.6). (BZ#1846589, BZ#1861928)

Security Fix(es):

* hostapd: UPnP SUBSCRIBE misbehavior in WPS AP (CVE-2020-12695)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1789.html" id="ALSA-2021-1789" type="self" title="ALSA-2021-1789"/>
      <reference href="https://vulners.com/cve/CVE-2020-12695" id="CVE-2020-12695" type="cve" title="CVE-2020-12695"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gssdp-devel" version="1.0.5" release="1.el8" epoch="0" arch="aarch64" src="gssdp-1.0.5-1.el8.src.rpm">
          <filename>gssdp-devel-1.0.5-1.el8.aarch64.rpm</filename>
          <sum type="sha256">5885c265cd260aab689b5474e87363650cb7c139f865c5d9440edf86fc331370</sum>
        </package>
        <package name="gssdp-docs" version="1.0.5" release="1.el8" epoch="0" arch="noarch" src="gssdp-1.0.5-1.el8.src.rpm">
          <filename>gssdp-docs-1.0.5-1.el8.noarch.rpm</filename>
          <sum type="sha256">6c844d13ebf582672013a54345f097d1b093ecfd603f783357e0d1f6d7ba64ea</sum>
        </package>
        <package name="gssdp" version="1.0.5" release="1.el8" epoch="0" arch="aarch64" src="gssdp-1.0.5-1.el8.src.rpm">
          <filename>gssdp-1.0.5-1.el8.aarch64.rpm</filename>
          <sum type="sha256">eb86e45b02d0c99c0f494b87aed8283888149ed21da87d2a144a211e610ad9fc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1811</id>
    <title>Moderate: libvncserver security update</title>
    <issued date="2021-05-18 06:09:01"/>
    <updated date="2021-05-18 06:08:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libvncserver is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.

Security Fix(es):

* libvncserver: uninitialized memory contents are vulnerable to Information Leak (CVE-2018-21247)

* libvncserver: buffer overflow in ConnectClientToUnixSock() (CVE-2019-20839)

* libvncserver: libvncserver/rfbregion.c has a NULL pointer dereference (CVE-2020-14397)

* libvncserver: libvncclient/rfbproto.c does not limit TextChat size (CVE-2020-14405)

* libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS (CVE-2020-25708)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1811.html" id="ALSA-2021-1811" type="self" title="ALSA-2021-1811"/>
      <reference href="https://vulners.com/cve/CVE-2018-21247" id="CVE-2018-21247" type="cve" title="CVE-2018-21247"/>
      <reference href="https://vulners.com/cve/CVE-2019-20839" id="CVE-2019-20839" type="cve" title="CVE-2019-20839"/>
      <reference href="https://vulners.com/cve/CVE-2020-14397" id="CVE-2020-14397" type="cve" title="CVE-2020-14397"/>
      <reference href="https://vulners.com/cve/CVE-2020-14405" id="CVE-2020-14405" type="cve" title="CVE-2020-14405"/>
      <reference href="https://vulners.com/cve/CVE-2020-25708" id="CVE-2020-25708" type="cve" title="CVE-2020-25708"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libvncserver" version="0.9.11" release="17.el8" epoch="0" arch="aarch64" src="libvncserver-0.9.11-17.el8.src.rpm">
          <filename>libvncserver-0.9.11-17.el8.aarch64.rpm</filename>
          <sum type="sha256">64a26dece1402e423977b408b0ac3c0bcbc3eb20ef7ac0ba6547824461eced7d</sum>
        </package>
        <package name="libvncserver-devel" version="0.9.11" release="17.el8" epoch="0" arch="aarch64" src="libvncserver-0.9.11-17.el8.src.rpm">
          <filename>libvncserver-devel-0.9.11-17.el8.aarch64.rpm</filename>
          <sum type="sha256">d493b52633e6d63611bbe9f9920783589d4e88f22a8c8b0cc864ee715dcfa2bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1842</id>
    <title>Moderate: raptor2 security and bug fix update</title>
    <issued date="2021-05-18 06:13:17"/>
    <updated date="2021-05-18 06:13:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for raptor2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. 

Security Fix(es):

* raptor: heap-based buffer overflows due to an error in calculating the maximum nspace declarations for the XML writer (CVE-2017-18926)

* raptor2: malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common (CVE-2020-25713)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1842.html" id="ALSA-2021-1842" type="self" title="ALSA-2021-1842"/>
      <reference href="https://vulners.com/cve/CVE-2017-18926" id="CVE-2017-18926" type="cve" title="CVE-2017-18926"/>
      <reference href="https://vulners.com/cve/CVE-2020-25713" id="CVE-2020-25713" type="cve" title="CVE-2020-25713"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="raptor2-devel" version="2.0.15" release="16.el8" epoch="0" arch="aarch64" src="raptor2-2.0.15-16.el8.src.rpm">
          <filename>raptor2-devel-2.0.15-16.el8.aarch64.rpm</filename>
          <sum type="sha256">501f5f0bde369eb0282a27eb4e764e1ddda42142e72ea0a759e751bb98317627</sum>
        </package>
        <package name="raptor2" version="2.0.15" release="16.el8" epoch="0" arch="aarch64" src="raptor2-2.0.15-16.el8.src.rpm">
          <filename>raptor2-2.0.15-16.el8.aarch64.rpm</filename>
          <sum type="sha256">ff9e5266d9616de0bd67d38919e3e373bef00396ed493acb7d003e899d870740</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1852</id>
    <title>Moderate: ghostscript security, bug fix, and enhancement update</title>
    <issued date="2021-05-18 06:14:55"/>
    <updated date="2021-05-18 06:14:50"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>6</pushcount>
    <severity>Moderate</severity>
    <summary>An update for ghostscript is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

The following packages have been upgraded to a later upstream version: ghostscript (9.27). (BZ#1874523)

Security Fix(es):

* ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS (CVE-2020-14373)

* ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS (CVE-2020-16287)

* ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS (CVE-2020-16288)

* ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS (CVE-2020-16290)

* ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS (CVE-2020-16291)

* ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS (CVE-2020-16292)

* ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c could result in a DoS (CVE-2020-16293)

* ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS (CVE-2020-16294)

* ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS (CVE-2020-16295)

* ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS (CVE-2020-16296)

* ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS (CVE-2020-16297)

* ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS (CVE-2020-16298)

* ghostscript: division by zero in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS (CVE-2020-16299)

* ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS (CVE-2020-16300)

* ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS (CVE-2020-16301)

* ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege escalation (CVE-2020-16302)

* ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a privilege escalation (CVE-2020-16303)

* ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS (CVE-2020-16304)

* ghostscript: NULL pointer dereference in devices/gdevtsep.c could result in a DoS (CVE-2020-16306)

* ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS (CVE-2020-16307)

* ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS (CVE-2020-16308)

* ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS (CVE-2020-16309)

* ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS (CVE-2020-16310)

* ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS (CVE-2020-17538)

* ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS (CVE-2020-16289)

* ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS (CVE-2020-16305)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1852.html" id="ALSA-2021-1852" type="self" title="ALSA-2021-1852"/>
      <reference href="https://vulners.com/cve/CVE-2020-14373" id="CVE-2020-14373" type="cve" title="CVE-2020-14373"/>
      <reference href="https://vulners.com/cve/CVE-2020-16287" id="CVE-2020-16287" type="cve" title="CVE-2020-16287"/>
      <reference href="https://vulners.com/cve/CVE-2020-16288" id="CVE-2020-16288" type="cve" title="CVE-2020-16288"/>
      <reference href="https://vulners.com/cve/CVE-2020-16289" id="CVE-2020-16289" type="cve" title="CVE-2020-16289"/>
      <reference href="https://vulners.com/cve/CVE-2020-16290" id="CVE-2020-16290" type="cve" title="CVE-2020-16290"/>
      <reference href="https://vulners.com/cve/CVE-2020-16291" id="CVE-2020-16291" type="cve" title="CVE-2020-16291"/>
      <reference href="https://vulners.com/cve/CVE-2020-16292" id="CVE-2020-16292" type="cve" title="CVE-2020-16292"/>
      <reference href="https://vulners.com/cve/CVE-2020-16293" id="CVE-2020-16293" type="cve" title="CVE-2020-16293"/>
      <reference href="https://vulners.com/cve/CVE-2020-16294" id="CVE-2020-16294" type="cve" title="CVE-2020-16294"/>
      <reference href="https://vulners.com/cve/CVE-2020-16295" id="CVE-2020-16295" type="cve" title="CVE-2020-16295"/>
      <reference href="https://vulners.com/cve/CVE-2020-16296" id="CVE-2020-16296" type="cve" title="CVE-2020-16296"/>
      <reference href="https://vulners.com/cve/CVE-2020-16297" id="CVE-2020-16297" type="cve" title="CVE-2020-16297"/>
      <reference href="https://vulners.com/cve/CVE-2020-16298" id="CVE-2020-16298" type="cve" title="CVE-2020-16298"/>
      <reference href="https://vulners.com/cve/CVE-2020-16299" id="CVE-2020-16299" type="cve" title="CVE-2020-16299"/>
      <reference href="https://vulners.com/cve/CVE-2020-16300" id="CVE-2020-16300" type="cve" title="CVE-2020-16300"/>
      <reference href="https://vulners.com/cve/CVE-2020-16301" id="CVE-2020-16301" type="cve" title="CVE-2020-16301"/>
      <reference href="https://vulners.com/cve/CVE-2020-16302" id="CVE-2020-16302" type="cve" title="CVE-2020-16302"/>
      <reference href="https://vulners.com/cve/CVE-2020-16303" id="CVE-2020-16303" type="cve" title="CVE-2020-16303"/>
      <reference href="https://vulners.com/cve/CVE-2020-16304" id="CVE-2020-16304" type="cve" title="CVE-2020-16304"/>
      <reference href="https://vulners.com/cve/CVE-2020-16305" id="CVE-2020-16305" type="cve" title="CVE-2020-16305"/>
      <reference href="https://vulners.com/cve/CVE-2020-16306" id="CVE-2020-16306" type="cve" title="CVE-2020-16306"/>
      <reference href="https://vulners.com/cve/CVE-2020-16307" id="CVE-2020-16307" type="cve" title="CVE-2020-16307"/>
      <reference href="https://vulners.com/cve/CVE-2020-16308" id="CVE-2020-16308" type="cve" title="CVE-2020-16308"/>
      <reference href="https://vulners.com/cve/CVE-2020-16309" id="CVE-2020-16309" type="cve" title="CVE-2020-16309"/>
      <reference href="https://vulners.com/cve/CVE-2020-16310" id="CVE-2020-16310" type="cve" title="CVE-2020-16310"/>
      <reference href="https://vulners.com/cve/CVE-2020-17538" id="CVE-2020-17538" type="cve" title="CVE-2020-17538"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="ghostscript-tools-fonts" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">07d64f00818b777a645de12ce2a09486fcfcf943d95f82b3b9ef99208113e296</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>libgs-devel-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">084e57d713abc654dc30240b25b28ec2f7b2f67e140670321aa37aca21c6d9f5</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>ghostscript-tools-printing-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2b8d6e782d7ffe8fd83583de0e0e2f7fb8dadc3957b13c53c7610229b6b52426</sum>
        </package>
        <package name="libgs" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>libgs-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">725eb2e02dc7c1421dd57b9eb37342d684f1fbe17d5361e052fb39472aa377d7</sum>
        </package>
        <package name="ghostscript" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>ghostscript-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">8ebc8612d3b6bd28e92b739735ed7bd5885e78964f88deaab5837ead8bc81631</sum>
        </package>
        <package name="ghostscript-x11" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>ghostscript-x11-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b3f74b6304ac5180f9540172243e2b56555cce5d309ef3a1e7c7da1004051db6</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="1.el8" epoch="0" arch="noarch" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>ghostscript-doc-9.27-1.el8.noarch.rpm</filename>
          <sum type="sha256">f4272facbfb25f9aaf34b083a0f00b542c5dd78760c50f62dd3d46024d35b7f1</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="1.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-1.el8.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f478c973943dde44ee3a24cb48e47f76d357b28d1ec37dd4461945c746549102</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1924</id>
    <title>Low: spice security update</title>
    <issued date="2021-05-18 06:24:46"/>
    <updated date="2021-05-18 06:24:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Low</severity>
    <summary>An update for spice is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.

Security Fix(es):

* spice: Client initiated renegotiation denial of service (CVE-2021-20201)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1924.html" id="ALSA-2021-1924" type="self" title="ALSA-2021-1924"/>
      <reference href="https://vulners.com/cve/CVE-2021-20201" id="CVE-2021-20201" type="cve" title="CVE-2021-20201"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="spice-server" version="0.14.3" release="4.el8" epoch="0" arch="aarch64" src="spice-0.14.3-4.el8.src.rpm">
          <filename>spice-server-0.14.3-4.el8.aarch64.rpm</filename>
          <sum type="sha256">0f953043c1e9a26bde137a6cf23d655d5f375a2cc670c8a268d3e08835ea00e0</sum>
        </package>
        <package name="spice-server-devel" version="0.14.3" release="4.el8" epoch="0" arch="aarch64" src="spice-0.14.3-4.el8.src.rpm">
          <filename>spice-server-devel-0.14.3-4.el8.aarch64.rpm</filename>
          <sum type="sha256">9e66538342ae30b651b4053eddc539325924a811d61d6d2084cca87872047151</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1968</id>
    <title>Moderate: mingw packages security and bug fix update</title>
    <issued date="2021-05-18 06:30:39"/>
    <updated date="2021-05-18 06:30:24"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>Moderate</severity>
    <summary>An update for mingw-binutils, mingw-bzip2, mingw-filesystem, and mingw-sqlite is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>MinGW is a free and open source software development environment to create Microsoft Windows applications.

The following packages have been upgraded to a later upstream version: mingw-sqlite (3.26.0.0). (BZ#1845475)

Security Fix(es):

* sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168)

* sqlite: Integer overflow in sqlite3_str_vappendf function in printf.c (CVE-2020-13434)

* sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630)

* sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631)

* sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query (CVE-2020-13632)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1968.html" id="ALSA-2021-1968" type="self" title="ALSA-2021-1968"/>
      <reference href="https://vulners.com/cve/CVE-2019-16168" id="CVE-2019-16168" type="cve" title="CVE-2019-16168"/>
      <reference href="https://vulners.com/cve/CVE-2020-13434" id="CVE-2020-13434" type="cve" title="CVE-2020-13434"/>
      <reference href="https://vulners.com/cve/CVE-2020-13630" id="CVE-2020-13630" type="cve" title="CVE-2020-13630"/>
      <reference href="https://vulners.com/cve/CVE-2020-13631" id="CVE-2020-13631" type="cve" title="CVE-2020-13631"/>
      <reference href="https://vulners.com/cve/CVE-2020-13632" id="CVE-2020-13632" type="cve" title="CVE-2020-13632"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="mingw32-sqlite-static" version="3.26.0.0" release="1.el8" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-1.el8.src.rpm">
          <filename>mingw32-sqlite-static-3.26.0.0-1.el8.noarch.rpm</filename>
          <sum type="sha256">35e6013c5508afd841454c97effa0f29159773a8535ab71d53a722c8733dc905</sum>
        </package>
        <package name="mingw64-filesystem" version="104" release="2.el8" epoch="0" arch="noarch" src="mingw-filesystem-104-2.el8.src.rpm">
          <filename>mingw64-filesystem-104-2.el8.noarch.rpm</filename>
          <sum type="sha256">38f6f73b1264786cf8ceec2cb28c884d1131a48111253107328ec51ec770e439</sum>
        </package>
        <package name="mingw32-binutils" version="2.30" release="3.el8" epoch="0" arch="aarch64" src="mingw-binutils-2.30-3.el8.src.rpm">
          <filename>mingw32-binutils-2.30-3.el8.aarch64.rpm</filename>
          <sum type="sha256">42a2587e8f44f1d195c35a798c7e903943b5bcef129d63cdc1c9c6511ddb1ea8</sum>
        </package>
        <package name="mingw32-bzip2-static" version="1.0.6" release="14.el8" epoch="0" arch="noarch" src="mingw-bzip2-1.0.6-14.el8.src.rpm">
          <filename>mingw32-bzip2-static-1.0.6-14.el8.noarch.rpm</filename>
          <sum type="sha256">5ead7341f4fb765581cdd6ed8c8723c66ff788c5da29668d64725f534c683cab</sum>
        </package>
        <package name="mingw32-sqlite" version="3.26.0.0" release="1.el8" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-1.el8.src.rpm">
          <filename>mingw32-sqlite-3.26.0.0-1.el8.noarch.rpm</filename>
          <sum type="sha256">65f32ec0f6e867edfd68bb7ac3fd821d0fcedd524af472842e626a3bc360c7a2</sum>
        </package>
        <package name="mingw-binutils-generic" version="2.30" release="3.el8" epoch="0" arch="aarch64" src="mingw-binutils-2.30-3.el8.src.rpm">
          <filename>mingw-binutils-generic-2.30-3.el8.aarch64.rpm</filename>
          <sum type="sha256">835910046fc1d6620dac15651e0e32a44636088ffb22ebdb6b684fdc279a491c</sum>
        </package>
        <package name="mingw-filesystem-base" version="104" release="2.el8" epoch="0" arch="noarch" src="mingw-filesystem-104-2.el8.src.rpm">
          <filename>mingw-filesystem-base-104-2.el8.noarch.rpm</filename>
          <sum type="sha256">8b13e0c940af1e9dee09a98b88f965e0cb204f907d006436b2d21bc3d8a5736e</sum>
        </package>
        <package name="mingw64-sqlite" version="3.26.0.0" release="1.el8" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-1.el8.src.rpm">
          <filename>mingw64-sqlite-3.26.0.0-1.el8.noarch.rpm</filename>
          <sum type="sha256">946945c5351083959ac0f55d6f3f0ef0eb505e7494d920cf630a32b68faff352</sum>
        </package>
        <package name="mingw64-sqlite-static" version="3.26.0.0" release="1.el8" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-1.el8.src.rpm">
          <filename>mingw64-sqlite-static-3.26.0.0-1.el8.noarch.rpm</filename>
          <sum type="sha256">b51047f448ee5b19af3f75e4276808dfeeabf9f4fd1a23710d93bfec49580e8a</sum>
        </package>
        <package name="mingw64-binutils" version="2.30" release="3.el8" epoch="0" arch="aarch64" src="mingw-binutils-2.30-3.el8.src.rpm">
          <filename>mingw64-binutils-2.30-3.el8.aarch64.rpm</filename>
          <sum type="sha256">bb69ae77e561ed8b5245cf05cf18150d8e9b7eea86d9baf7ea9429845ca31d71</sum>
        </package>
        <package name="mingw64-bzip2" version="1.0.6" release="14.el8" epoch="0" arch="noarch" src="mingw-bzip2-1.0.6-14.el8.src.rpm">
          <filename>mingw64-bzip2-1.0.6-14.el8.noarch.rpm</filename>
          <sum type="sha256">d559a1e5bfcb89b17e2a95ee8b6ba9dc47de5cdb53829f6d20753747dc593be8</sum>
        </package>
        <package name="mingw32-bzip2" version="1.0.6" release="14.el8" epoch="0" arch="noarch" src="mingw-bzip2-1.0.6-14.el8.src.rpm">
          <filename>mingw32-bzip2-1.0.6-14.el8.noarch.rpm</filename>
          <sum type="sha256">d786e38669ae3888d4218f9eedeccc74180dc03d1241c6dfbe785284264a221c</sum>
        </package>
        <package name="mingw64-bzip2-static" version="1.0.6" release="14.el8" epoch="0" arch="noarch" src="mingw-bzip2-1.0.6-14.el8.src.rpm">
          <filename>mingw64-bzip2-static-1.0.6-14.el8.noarch.rpm</filename>
          <sum type="sha256">defcfa4844146febc70e056d73cbd2cf0722d9a0812c5d4685526f3ba0978b28</sum>
        </package>
        <package name="mingw32-filesystem" version="104" release="2.el8" epoch="0" arch="noarch" src="mingw-filesystem-104-2.el8.src.rpm">
          <filename>mingw32-filesystem-104-2.el8.noarch.rpm</filename>
          <sum type="sha256">f38cbadb0f2be95dfa1d8d39406f47b8189ee2c9a6dcb5fb9f7d94af8b8ab8ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:1972</id>
    <title>Moderate: pandoc security update</title>
    <issued date="2021-05-18 06:31:29"/>
    <updated date="2021-05-18 06:31:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for pandoc is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library.

Security Fix(es):

* cmark-gfm: Exponential time to parse certain inputs could lead to DoS (CVE-2020-5238)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-1972.html" id="ALSA-2021-1972" type="self" title="ALSA-2021-1972"/>
      <reference href="https://vulners.com/cve/CVE-2020-5238" id="CVE-2020-5238" type="cve" title="CVE-2020-5238"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="pandoc-common" version="2.0.6" release="5.el8" epoch="0" arch="noarch" src="pandoc-2.0.6-5.el8.src.rpm">
          <filename>pandoc-common-2.0.6-5.el8.noarch.rpm</filename>
          <sum type="sha256">3ba5b63cf461a486cd5d71f2f09a20a1ed91ed0d7dd639fcd44f3ca3d2fb358e</sum>
        </package>
        <package name="pandoc" version="2.0.6" release="5.el8" epoch="0" arch="aarch64" src="pandoc-2.0.6-5.el8.src.rpm">
          <filename>pandoc-2.0.6-5.el8.aarch64.rpm</filename>
          <sum type="sha256">4a896bdde1a6b3a08e9390459df39594225b0b41aaba1a010cbd937e0ae13f7c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:2363</id>
    <title>Important: gupnp security update</title>
    <issued date="2021-06-09 12:54:08"/>
    <updated date="2021-06-09 12:54:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Important</severity>
    <summary>An update for gupnp is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GUPnP is an object-oriented open source framework for creating UPnP devices and control points, written in C using GObject and libsoup. The GUPnP API is intended to be easy to use, efficient and flexible.

Security Fix(es):

* gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local UPnP services (CVE-2021-33516)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-2363.html" id="ALSA-2021-2363" type="self" title="ALSA-2021-2363"/>
      <reference href="https://vulners.com/cve/CVE-2021-33516" id="CVE-2021-33516" type="cve" title="CVE-2021-33516"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gupnp" version="1.0.6" release="2.el8_4" epoch="0" arch="aarch64" src="gupnp-1.0.6-2.el8_4.src.rpm">
          <filename>gupnp-1.0.6-2.el8_4.aarch64.rpm</filename>
          <sum type="sha256">8b335342f6b8f6a02db14d075ed54275f547eb0ebcc4185a24158df5da790955</sum>
        </package>
        <package name="gupnp-devel" version="1.0.6" release="2.el8_4" epoch="0" arch="aarch64" src="gupnp-1.0.6-2.el8_4.src.rpm">
          <filename>gupnp-devel-1.0.6-2.el8_4.aarch64.rpm</filename>
          <sum type="sha256">a42a41ca123c0e1ec9d22d2fbe4b9e9301e59c2aa67c740c9473cbbb6aebc3d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:2583</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2021-06-29 13:57:32"/>
    <updated date="2021-06-29 13:57:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the python38:3.8 and python38-devel:3.8 modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* PyYAML: incomplete fix for CVE-2020-1747 (CVE-2020-14343)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-2583.html" id="ALSA-2021-2583" type="self" title="ALSA-2021-2583"/>
      <reference href="https://vulners.com/cve/CVE-2020-14343" id="CVE-2020-14343" type="cve" title="CVE-2020-14343"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel</name>
        <module name="python38-devel" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-asn1crypto" version="1.2.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-asn1crypto-1.2.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-asn1crypto-1.2.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">02dd00e439241ec1b0a1151948e9445a82f9eecf9740cd9e21f365ddd0dce291</sum>
        </package>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-pycparser" version="2.19" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pycparser-2.19-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pycparser-2.19-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">323e4624b4a15564a85ebcbfd841409d1642e4623ee4ec2d3aed59bc7e1ab829</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-markupsafe-1.1.1-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">3f488db760321468941121cb12ad0fc0e9475b3622136942dcd630cffd24e58b</sum>
        </package>
        <package name="python38-chardet" version="3.0.4" release="19.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-chardet-3.0.4-19.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-chardet-3.0.4-19.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">3fa07e33c9abbda7289a9afec9ed4b0923a21b740c5011f4111055590466435a</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="PyYAML-5.4.1-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">4f076f8068434440b2f5d4e3d4f77d1f4b6207626d2f23a04c6a01522ff23ac5</sum>
        </package>
        <package name="python38-six" version="1.12.0" release="10.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-six-1.12.0-10.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-six-1.12.0-10.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">64fccef78c9117d67f1dd91023f2e52a5dea26b59b342b4ab5244642d3fb443d</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-scipy" version="1.3.1" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="scipy-1.3.1-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-scipy-1.3.1-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">7a8f643660f230b6d5a8d0f3292141748a5c38bc3030e618f6f103c63af0f44f</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="Cython-0.29.14-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">a4e1d3d54e2a12f52aab2227978ee9e0a7af759c5d2e2564214321c648ef9ae5</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b2e43444b2dabaa46628615d6263e07945d5eb190e4af36952cfb19c511d4864</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="mod_wsgi-4.6.8-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b323ee37330a883fc856e013571f5135df2fb8713757dd2590096cde7bd6614f</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-cffi-1.13.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b40a44d392b221398be147937cdf5987d0f3d4e8bfec2e1e3a55271aafe281d8</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-cryptography-2.8-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">bf72b57867e7b5e38597ff7d7cd4c14a8f5917cabef72b72aa927ddf62cd84f6</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">c4a25a77c5201ef4da0194f13891bae13417ab45a23def0e8b7e9cbd09966f7a</sum>
        </package>
        <package name="python38-ply" version="3.11" release="10.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-ply-3.11-10.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-ply-3.11-10.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c9e329fc07bf0783b7fe9856872d89b8585935f0b0796d9644bd9180e856ee0e</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-PyMySQL" version="0.10.1" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-PyMySQL-0.10.1-1.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ea7ab6e644af54dd1c7b612565016c4fbc5a3971de5086cf83c96544fb234007</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">eba86f1d719f3bf1b524322a7ef1f22f20a539a644c465831f8e3e102a5176bb</sum>
        </package>
        <package name="python38-requests" version="2.22.0" release="9.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-requests-2.22.0-9.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-requests-2.22.0-9.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f0aae6da0c3adc1ce2afc8002e1de2085429c2f1251e8a1b0a4ba94868e10e74</sum>
        </package>
        <package name="python38-idna" version="2.8" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-idna-2.8-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-idna-2.8-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f2a5e3f36b6b6dcfb406a36e33d0cb2a5ccecdb58f6ad2b6ef2be364fbc98eb6</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
        <package name="python38-pytz" version="2019.3" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytz-2019.3-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytz-2019.3-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f7e39d7913177c47998e2b3a6be29a29cb15561a3baad01deb9754a388c3762f</sum>
        </package>
        <package name="python38-pysocks" version="1.7.1" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pysocks-1.7.1-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pysocks-1.7.1-4.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">fc640ac497749830a68c783a3d77e3d53ac14c9c72fb74ec533f5f12c0a6c05e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:3075</id>
    <title>Low: libuv security update</title>
    <issued date="2021-08-10 12:00:55"/>
    <updated date="2021-08-10 12:00:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Low</severity>
    <summary>An update for libuv is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: out-of-bounds read in uv__idna_toascii() can lead to information disclosures or crashes (CVE-2021-22918)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-3075.html" id="ALSA-2021-3075" type="self" title="ALSA-2021-3075"/>
      <reference href="https://vulners.com/cve/CVE-2021-22918" id="CVE-2021-22918" type="cve" title="CVE-2021-22918"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libuv" version="1.41.1" release="1.el8_4" epoch="1" arch="aarch64" src="libuv-1.41.1-1.el8_4.src.rpm">
          <filename>libuv-1.41.1-1.el8_4.aarch64.rpm</filename>
          <sum type="sha256">4fcef6fcb78e5f69f3bb2676523bb641c75cbc5e2943d4e39b05ab9f40095cc7</sum>
        </package>
        <package name="libuv-devel" version="1.41.1" release="1.el8_4" epoch="1" arch="aarch64" src="libuv-1.41.1-1.el8_4.src.rpm">
          <filename>libuv-devel-1.41.1-1.el8_4.aarch64.rpm</filename>
          <sum type="sha256">e2d11e21fede27ebfa1ba3b2b4fbc6fb9f7b0d293b0388e5777eca33a57f0ca4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4160</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2021-11-09 08:26:25"/>
    <updated date="2021-11-09 12:46:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the python39:3.9 and python39-devel:3.9 modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Information disclosure via pydoc (CVE-2021-3426)

* python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)

* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

* python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4160.html" id="ALSA-2021-4160" type="self" title="ALSA-2021-4160"/>
      <reference href="https://vulners.com/cve/CVE-2021-28957" id="CVE-2021-28957" type="cve" title="CVE-2021-28957"/>
      <reference href="https://vulners.com/cve/CVE-2021-29921" id="CVE-2021-29921" type="cve" title="CVE-2021-29921"/>
      <reference href="https://vulners.com/cve/CVE-2021-33503" id="CVE-2021-33503" type="cve" title="CVE-2021-33503"/>
      <reference href="https://vulners.com/cve/CVE-2021-3426" id="CVE-2021-3426" type="cve" title="CVE-2021-3426"/>
      <reference href="https://vulners.com/cve/CVE-2021-3572" id="CVE-2021-3572" type="cve" title="CVE-2021-3572"/>
      <reference href="https://vulners.com/cve/CVE-2021-3733" id="CVE-2021-3733" type="cve" title="CVE-2021-3733"/>
      <reference href="https://vulners.com/cve/CVE-2021-3737" id="CVE-2021-3737" type="cve" title="CVE-2021-3737"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python39-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python39-devel</name>
        <module name="python39-devel" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">028735173d71e16034adf25fdd86012f0e2d2f58ed2186036ba532b12392d8f0</sum>
        </package>
        <package name="python39-chardet" version="3.0.4" release="19.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-chardet-3.0.4-19.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-chardet-3.0.4-19.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">05646c9640a93f0cae3cf9dea2954dabd7e29f8fc9afbfd6b560e4a98004b5d9</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-urllib3-1.25.10-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-urllib3-1.25.10-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">06aabd763910bfdb55f7b8f0325a9d8859a67a50d845f39fadc9096890dbf496</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="mod_wsgi-4.7.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-4.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">18dbc2c620fd7c15d5134a7b1f17d869ff4589a42586f37a4ea2387e8bf8b677</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">29c92aa7decb87f06c5a6c7709f0e28765e669ead3b2a969a2244f1d51279f9b</sum>
        </package>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pycparser" version="2.20" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pycparser-2.20-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pycparser-2.20-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">36951a3338286403ce0e088c1f19852632705e7dceef5571e5464b5c61208974</sum>
        </package>
        <package name="python39-pysocks" version="1.7.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pysocks-1.7.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pysocks-1.7.1-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">36d0f271b88893241f5dbd4c7bb8fb6c825a18aed3b1d77d8877e483dcaf9d61</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-cryptography-3.3.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">38c23593dc3854fa23e60dc3afdaca7c3b26d52c5eeae1a82b42a2ef7bcd2ffc</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psutil-5.8.0-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">69c388dbbaf69e6b3cd4f75de40ff58dcb926624f4427815e0da758ae15e650f</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-requests-2.25.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-requests-2.25.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">70fefcaf18f9672157a32e4b921fdeb3ddddcf08aff788bfe9f3d94b1af167a6</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7e3f10153a12cb968fc339affa9729e2fccbc6c95a764a5c230e93cb6af85860</sum>
        </package>
        <package name="python39-idna" version="2.10" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-idna-2.10-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-idna-2.10-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b2cb5e6fb4ad66c6e6913569625783736fb84e6361b4e1a6ca777039dedd11f</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-numpy-doc" version="1.19.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-numpy-doc-1.19.4-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">a536afb6c681d3c12afcc479fe84dada68372d9502bbc9396fdd296620a6a648</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">ab4808b3ac95ebf5afceadacfa3f59a4cc3e41426026e47e0bd9e1e4cb31c319</sum>
        </package>
        <package name="python39-wheel" version="0.35.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="1" arch="noarch" src="python-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">aeba35b86a5db0f9131e0e258b2d5882206fc640b56bdf7beb9497191b8941ed</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-toml" version="0.10.1" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-toml-0.10.1-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-toml-0.10.1-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">bd68deb2acd20331dd71a07c97a2fec809ec50d67d832edb6d90346ae441ca9a</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="PyYAML-5.4.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">bd69cec4b5d32072ab1ad36b845af4e82a9e505bdee9d7d2d70a8409234ba3ad</sum>
        </package>
        <package name="python39-six" version="1.15.0" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-six-1.15.0-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-six-1.15.0-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">c0cabab4e96d5743180aaea757f23055acc7a325f00a856c7d685c250ce68b5e</sum>
        </package>
        <package name="python39-wheel-wheel" version="0.35.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="1" arch="noarch" src="python-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wheel-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">c3c6df124b0b18855dc4e5d6afc893e3112a98615f540bd7b651f8e7988ba8b2</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-setuptools-50.3.2-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d5b7ac46f04cfefe6d865feb17b059588ebde0ace6783edfce048c3d7a3577ae</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d9096bc24ef73fb8f6afaf3a85b96011b2be8b3ef4c1d463faa2c10d5c7f0d6d</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="scipy-1.5.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">d911ca27ba07fb999320bc25d65d6106a2a5618c0f1c9e191bf94d9ddaa40b2e</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-cffi-1.14.3-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">daa35574cf0d12b84d723900240dd019028501344df9ebc34279ee8eba2ba516</sum>
        </package>
        <package name="python39-ply" version="3.11" release="10.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-ply-3.11-10.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-ply-3.11-10.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">e134e4d0a7d44ab24b28a9e5de2d8c186f5596c5f0c588bea2770d3225acf63c</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">e825258ae08adade3db36bc28b97d98147c2c585127e678f52727e8b8939afa6</sum>
        </package>
        <package name="python39-PyMySQL" version="0.10.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-PyMySQL-0.10.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f81237c27d6ab23aae04cf6251a21605834a254438d5d936e4d68567d13579e7</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4162</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2021-11-09 12:47:54"/>
    <updated date="2021-11-09 12:47:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the python38:3.8 and python38-devel:3.8 modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

* python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

* python: Information disclosure via pydoc (CVE-2021-3426)

* python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771)

* python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)

* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4162.html" id="ALSA-2021-4162" type="self" title="ALSA-2021-4162"/>
      <reference href="https://vulners.com/cve/CVE-2019-18874" id="CVE-2019-18874" type="cve" title="CVE-2019-18874"/>
      <reference href="https://vulners.com/cve/CVE-2020-27619" id="CVE-2020-27619" type="cve" title="CVE-2020-27619"/>
      <reference href="https://vulners.com/cve/CVE-2020-28493" id="CVE-2020-28493" type="cve" title="CVE-2020-28493"/>
      <reference href="https://vulners.com/cve/CVE-2021-20095" id="CVE-2021-20095" type="cve" title="CVE-2021-20095"/>
      <reference href="https://vulners.com/cve/CVE-2021-23336" id="CVE-2021-23336" type="cve" title="CVE-2021-23336"/>
      <reference href="https://vulners.com/cve/CVE-2021-28957" id="CVE-2021-28957" type="cve" title="CVE-2021-28957"/>
      <reference href="https://vulners.com/cve/CVE-2021-29921" id="CVE-2021-29921" type="cve" title="CVE-2021-29921"/>
      <reference href="https://vulners.com/cve/CVE-2021-33503" id="CVE-2021-33503" type="cve" title="CVE-2021-33503"/>
      <reference href="https://vulners.com/cve/CVE-2021-3426" id="CVE-2021-3426" type="cve" title="CVE-2021-3426"/>
      <reference href="https://vulners.com/cve/CVE-2021-3572" id="CVE-2021-3572" type="cve" title="CVE-2021-3572"/>
      <reference href="https://vulners.com/cve/CVE-2021-42771" id="CVE-2021-42771" type="cve" title="CVE-2021-42771"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel</name>
        <module name="python38-devel" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-asn1crypto" version="1.2.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-asn1crypto-1.2.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-asn1crypto-1.2.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">02dd00e439241ec1b0a1151948e9445a82f9eecf9740cd9e21f365ddd0dce291</sum>
        </package>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-urllib3" version="1.25.7" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-urllib3-1.25.7-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-urllib3-1.25.7-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">1c854cd02b9b9f3312264296a6fbb6911ba465792d64fd2cbf97a5a01a253d26</sum>
        </package>
        <package name="python38-pycparser" version="2.19" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pycparser-2.19-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pycparser-2.19-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">323e4624b4a15564a85ebcbfd841409d1642e4623ee4ec2d3aed59bc7e1ab829</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-markupsafe-1.1.1-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">3f488db760321468941121cb12ad0fc0e9475b3622136942dcd630cffd24e58b</sum>
        </package>
        <package name="python38-chardet" version="3.0.4" release="19.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-chardet-3.0.4-19.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-chardet-3.0.4-19.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">3fa07e33c9abbda7289a9afec9ed4b0923a21b740c5011f4111055590466435a</sum>
        </package>
        <package name="python38-wheel-wheel" version="0.33.6" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wheel-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">3fe0327ebce820b6d26c55b284ec7cabcd5d27d70ee5a310db62c6cee6680e86</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="PyYAML-5.4.1-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">4f076f8068434440b2f5d4e3d4f77d1f4b6207626d2f23a04c6a01522ff23ac5</sum>
        </package>
        <package name="python38-six" version="1.12.0" release="10.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-six-1.12.0-10.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-six-1.12.0-10.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">64fccef78c9117d67f1dd91023f2e52a5dea26b59b342b4ab5244642d3fb443d</sum>
        </package>
        <package name="python38-psutil" version="5.6.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psutil-5.6.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psutil-5.6.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">6f9de9137566a128895b2ab39744217451977a1afd34d187cb54bf607946f459</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-numpy-f2py" version="1.17.3" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-numpy-f2py-1.17.3-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">6fc01ad69ab3ae9c60dad8a7e22220072cbd24c5495cd0158e8d22c7e3471dfc</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-scipy" version="1.3.1" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="scipy-1.3.1-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-scipy-1.3.1-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">7a8f643660f230b6d5a8d0f3292141748a5c38bc3030e618f6f103c63af0f44f</sum>
        </package>
        <package name="python38-babel" version="2.7.0" release="11.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="babel-2.7.0-11.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-babel-2.7.0-11.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">83c708a32e8f1f3384ef61a65e81536ba1a3dd654c7db21ca2e6fb33f6fe5277</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="Cython-0.29.14-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">a4e1d3d54e2a12f52aab2227978ee9e0a7af759c5d2e2564214321c648ef9ae5</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b2e43444b2dabaa46628615d6263e07945d5eb190e4af36952cfb19c511d4864</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="mod_wsgi-4.6.8-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b323ee37330a883fc856e013571f5135df2fb8713757dd2590096cde7bd6614f</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-cffi-1.13.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b40a44d392b221398be147937cdf5987d0f3d4e8bfec2e1e3a55271aafe281d8</sum>
        </package>
        <package name="python38-wheel" version="0.33.6" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bc0227adb0fc8a67582fa1e63bc325475c24d3079f987c24985c7e1c60e2683b</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-jinja2" version="2.10.3" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-jinja2-2.10.3-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-jinja2-2.10.3-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bec5246952e7c06cdf9668cddbaf25ef126455e0c23c58709f2390b31a4e26ed</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-cryptography-2.8-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">bf72b57867e7b5e38597ff7d7cd4c14a8f5917cabef72b72aa927ddf62cd84f6</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">c4a25a77c5201ef4da0194f13891bae13417ab45a23def0e8b7e9cbd09966f7a</sum>
        </package>
        <package name="python38-ply" version="3.11" release="10.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-ply-3.11-10.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-ply-3.11-10.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c9e329fc07bf0783b7fe9856872d89b8585935f0b0796d9644bd9180e856ee0e</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-PyMySQL" version="0.10.1" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-PyMySQL-0.10.1-1.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ea7ab6e644af54dd1c7b612565016c4fbc5a3971de5086cf83c96544fb234007</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">eba86f1d719f3bf1b524322a7ef1f22f20a539a644c465831f8e3e102a5176bb</sum>
        </package>
        <package name="python38-numpy-doc" version="1.17.3" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-numpy-doc-1.17.3-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ed0bf353f1c8dde52a1ca4878bfeecc59da8efe63cdd1d8169f19be49d7f3e10</sum>
        </package>
        <package name="python38-setuptools-wheel" version="41.6.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-setuptools-41.6.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-setuptools-wheel-41.6.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ed63488c6203e053f99e3bdf9b49d2af17d3f4ca0f9d1462e6cca591f123e806</sum>
        </package>
        <package name="python38-requests" version="2.22.0" release="9.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-requests-2.22.0-9.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-requests-2.22.0-9.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f0aae6da0c3adc1ce2afc8002e1de2085429c2f1251e8a1b0a4ba94868e10e74</sum>
        </package>
        <package name="python38-idna" version="2.8" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-idna-2.8-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-idna-2.8-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f2a5e3f36b6b6dcfb406a36e33d0cb2a5ccecdb58f6ad2b6ef2be364fbc98eb6</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
        <package name="python38-pytz" version="2019.3" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytz-2019.3-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytz-2019.3-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f7e39d7913177c47998e2b3a6be29a29cb15561a3baad01deb9754a388c3762f</sum>
        </package>
        <package name="python38-pysocks" version="1.7.1" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pysocks-1.7.1-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pysocks-1.7.1-4.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">fc640ac497749830a68c783a3d77e3d53ac14c9c72fb74ec533f5f12c0a6c05e</sum>
        </package>
        <package name="python38-setuptools" version="41.6.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-setuptools-41.6.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-setuptools-41.6.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ff19d2d739de077948f84bd9464b47f894f00ef116a40e8be06a7d2e5d3c11e2</sum>
        </package>
        <package name="python38-numpy" version="1.17.3" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">ff2cacf645aae68b3a20840f3dc0fd2255a04eeac436559c0f5adec71ccd448f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4172</id>
    <title>Moderate: qt5 security, bug fix, and enhancement update</title>
    <issued date="2021-11-09 08:31:20"/>
    <updated date="2021-11-09 12:48:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>Moderate</severity>
    <summary>An update for qt5 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Qt is a software toolkit for developing applications.

The following packages have been upgraded to a later upstream version: adwaita-qt (1.2.1), python-qt5 (5.15.0), qgnomeplatform (0.7.1), qt5 (5.15.2), qt5-qt3d (5.15.2), qt5-qtbase (5.15.2), qt5-qtconnectivity (5.15.2), qt5-qtdeclarative (5.15.2), qt5-qtdoc (5.15.2), qt5-qtgraphicaleffects (5.15.2), qt5-qtimageformats (5.15.2), qt5-qtlocation (5.15.2), qt5-qtmultimedia (5.15.2), qt5-qtquickcontrols (5.15.2), qt5-qtquickcontrols2 (5.15.2), qt5-qtscript (5.15.2), qt5-qtsensors (5.15.2), qt5-qtserialbus (5.15.2), qt5-qtserialport (5.15.2), qt5-qtsvg (5.15.2), qt5-qttools (5.15.2), qt5-qttranslations (5.15.2), qt5-qtwayland (5.15.2), qt5-qtwebchannel (5.15.2), qt5-qtwebsockets (5.15.2), qt5-qtx11extras (5.15.2), qt5-qtxmlpatterns (5.15.2), sip (4.19.24). (BZ#1928156)

Security Fix(es):

* qt: Out of bounds read in function QRadialFetchSimd from crafted svg file (CVE-2021-3481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4172.html" id="ALSA-2021-4172" type="self" title="ALSA-2021-4172"/>
      <reference href="https://vulners.com/cve/CVE-2021-3481" id="CVE-2021-3481" type="cve" title="CVE-2021-3481"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="qt5-qtdeclarative" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtdeclarative-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtdeclarative-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">009a6ded5a660785811f4d99943307cfa36ffb6e61cb7ee1831f687d5abab178</sum>
        </package>
        <package name="qt5-qtx11extras-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtx11extras-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtx11extras-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">01714fb13e16b9ea438673389f069b7e919c9a7cecbaa72b8f5df9172829052b</sum>
        </package>
        <package name="qgnomeplatform" version="0.7.1" release="2.el8" epoch="0" arch="aarch64" src="qgnomeplatform-0.7.1-2.el8.src.rpm">
          <filename>qgnomeplatform-0.7.1-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0320cc10ba4d08507aa6dad7d1a74d55718c6dbce74aee2d81ec9d2da4854c6a</sum>
        </package>
        <package name="qt5-qtgraphicaleffects" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtgraphicaleffects-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtgraphicaleffects-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">052722f7bda656784ce17c9d3b570493d83ab914298dc12053d18125105ffc01</sum>
        </package>
        <package name="qt5-qtquickcontrols2-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtquickcontrols2-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtquickcontrols2-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1ad22a45c210854851ab411a60719f8ebeed05c12796cea35d198b39e9703d53</sum>
        </package>
        <package name="qt5-qtwebsockets" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtwebsockets-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtwebsockets-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1b85a953b92daf928e129d360cc35b2f2f469aae6b08e28c21b53e47055f2aae</sum>
        </package>
        <package name="qt5-qtwebsockets-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtwebsockets-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtwebsockets-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1ca8178f85df8d196961e1ea0c7b1a035741a5ecfe05d0216c6264fbf0e80dac</sum>
        </package>
        <package name="qt5-qtxmlpatterns-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtxmlpatterns-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtxmlpatterns-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">22ae18cf7d1b4ceb7a33681c5fe05bf2a1cb681e010bdfbf014525f5115fe4ea</sum>
        </package>
        <package name="qt5-qtquickcontrols" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtquickcontrols-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtquickcontrols-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">273b56d523b7d013a0ed611a3b0eb751407a15076da9ad6002ffeb158674cb2d</sum>
        </package>
        <package name="qt5-qtdeclarative-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtdeclarative-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtdeclarative-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">28676005f90d60b7a6e1234d5f33a8c34396f2badd8f3107fc6617e64ea82086</sum>
        </package>
        <package name="sip" version="4.19.24" release="2.el8" epoch="0" arch="aarch64" src="sip-4.19.24-2.el8.src.rpm">
          <filename>sip-4.19.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2a4708f59526b70fc8ab1b4e91811a034a2f397995d4af60e6aab2a4fbf07374</sum>
        </package>
        <package name="python3-qt5" version="5.15.0" release="2.el8" epoch="0" arch="aarch64" src="python-qt5-5.15.0-2.el8.src.rpm">
          <filename>python3-qt5-5.15.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2f97747eb7ae6ee60563276af3261a97c2d2ec3e3a2f4ba45e2ce92075e23a03</sum>
        </package>
        <package name="qt5-qtlocation-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtlocation-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtlocation-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3b5533ed85b646835260be2303aca8a30c62dff241aa5e05dbe7e1adb7b14a86</sum>
        </package>
        <package name="qt5-qtquickcontrols-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtquickcontrols-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtquickcontrols-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3be4d0568f780f9a1d75fb37b5e4a01233073b4505daa4353164bed88396132d</sum>
        </package>
        <package name="qt5-qtdeclarative-static" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtdeclarative-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtdeclarative-static-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3d7017588852b68c34e2b00481364c660b888bf47b95d62434b92647bd11b932</sum>
        </package>
        <package name="qt5-qtcanvas3d-examples" version="5.12.5" release="3.el8" epoch="0" arch="aarch64" src="qt5-qtcanvas3d-5.12.5-3.el8.src.rpm">
          <filename>qt5-qtcanvas3d-examples-5.12.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">401b603ea2096e5e072c709b0bbdebe61994e381e975f0deb9709ded79e3571c</sum>
        </package>
        <package name="qt5-qtwebchannel-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtwebchannel-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtwebchannel-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4081d54e958b224b7a36c1c77f7eaba12a7d623f458ae80d5b44535bbcbf83bf</sum>
        </package>
        <package name="python3-sip-devel" version="4.19.24" release="2.el8" epoch="0" arch="aarch64" src="sip-4.19.24-2.el8.src.rpm">
          <filename>python3-sip-devel-4.19.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">46c217514480d9afdd225ff5db30694ee3a9f437683b3bbd33ec277989add438</sum>
        </package>
        <package name="qt5-qtserialbus-devel" version="5.15.2" release="3.el8" epoch="0" arch="aarch64" src="qt5-qtserialbus-5.15.2-3.el8.src.rpm">
          <filename>qt5-qtserialbus-devel-5.15.2-3.el8.aarch64.rpm</filename>
          <sum type="sha256">4dacf33ae25ebd4c829fb095634d497c31d8b970682421d7d8a74ea631dc8e4a</sum>
        </package>
        <package name="qt5-qtxmlpatterns" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtxmlpatterns-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtxmlpatterns-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4dc7a281023dcadfcee9f801b17a2d68982f57619cf1eca996ee0c9b9fa65718</sum>
        </package>
        <package name="python-qt5-rpm-macros" version="5.15.0" release="2.el8" epoch="0" arch="noarch" src="python-qt5-5.15.0-2.el8.src.rpm">
          <filename>python-qt5-rpm-macros-5.15.0-2.el8.noarch.rpm</filename>
          <sum type="sha256">53c79035e44ac89087530d5032fdc618c48c9d72c77fe083f73ba0d30965c5a1</sum>
        </package>
        <package name="python3-qt5-devel" version="5.15.0" release="2.el8" epoch="0" arch="aarch64" src="python-qt5-5.15.0-2.el8.src.rpm">
          <filename>python3-qt5-devel-5.15.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5949bec9f93842b5a19a101f72ab3b0440b12791a03235f19d680af9077749fa</sum>
        </package>
        <package name="qt5-rpm-macros" version="5.15.2" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.2-1.el8.src.rpm">
          <filename>qt5-rpm-macros-5.15.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">60d6bd53029ad1fe8a86af86fea87f3dc8ec11ba9bb4f947e9df1d79d2a59515</sum>
        </package>
        <package name="qt5-qtserialport-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtserialport-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtserialport-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">640b1d1028fc2021ff6f4b347d4ee06f557bfa724eae2a11849133381e0948af</sum>
        </package>
        <package name="qt5-qtcanvas3d" version="5.12.5" release="3.el8" epoch="0" arch="aarch64" src="qt5-qtcanvas3d-5.12.5-3.el8.src.rpm">
          <filename>qt5-qtcanvas3d-5.12.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">6ba12849ea8611f207439e46d35654b89b6f8133448f9b9bcc1d90be776f0560</sum>
        </package>
        <package name="qt5-qt3d-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qt3d-5.15.2-2.el8.src.rpm">
          <filename>qt5-qt3d-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6de3b13da07139df50e06b49b9d63c8b4165b15d5dd4e978ce50ab5126f22699</sum>
        </package>
        <package name="qt5-qtscript-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtscript-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtscript-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6f3eacf50a95c13bb71b43bf5d718126b5b1b937ceb6d05c4447c59d1d6cfa62</sum>
        </package>
        <package name="qt5-qtdoc" version="5.15.2" release="1.el8" epoch="0" arch="noarch" src="qt5-qtdoc-5.15.2-1.el8.src.rpm">
          <filename>qt5-qtdoc-5.15.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">76ecaef136cad978268766e80a1ba6eee6de43e0259508eb9ed693913305aac2</sum>
        </package>
        <package name="qt5-qtx11extras" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtx11extras-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtx11extras-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7e0b36bc4718dfd229c8f314938b6d919af5e8f9e07af1ecfca31538b6594f84</sum>
        </package>
        <package name="qt5-qt3d" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qt3d-5.15.2-2.el8.src.rpm">
          <filename>qt5-qt3d-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7e22955ac8847fa6a63e75be470fd78bacc56a6fcd738cdb315922ee770f2306</sum>
        </package>
        <package name="qt5-qtwebchannel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtwebchannel-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtwebchannel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7e592f762935e79a2b592701278ecb7fc1ebef1c9783f9f941c9996b2c51d9dc</sum>
        </package>
        <package name="qt5-qtsensors-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtsensors-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtsensors-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">80abfb573c3d2225afc6ac92db2c8e5005a5de2c86751aec05a64d98d1b7904d</sum>
        </package>
        <package name="python3-wx-siplib" version="4.19.24" release="2.el8" epoch="0" arch="aarch64" src="sip-4.19.24-2.el8.src.rpm">
          <filename>python3-wx-siplib-4.19.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">82539efe0949de16de059f1762efb90a1c9d8eb644ce5f301620f761233ab8a2</sum>
        </package>
        <package name="qt5-qtsensors-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtsensors-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtsensors-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8544774a97a4e8054cea576e1311ed337c189f2fff5203e922476317872b8622</sum>
        </package>
        <package name="qt5-qtconnectivity-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtconnectivity-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtconnectivity-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">889139d7b9e361691e67a0818eded24e6e89f946cee47bc2b31bbd37104c1917</sum>
        </package>
        <package name="qt5-devel" version="5.15.2" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.2-1.el8.src.rpm">
          <filename>qt5-devel-5.15.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">88e8c9476063a97620470dfab7a9e0c710b6e7528e73bcbec17824e9104ea416</sum>
        </package>
        <package name="qt5-srpm-macros" version="5.15.2" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.2-1.el8.src.rpm">
          <filename>qt5-srpm-macros-5.15.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">8949c227158af828038b9b75b1147b2c7f1837c94b937c9da68873267c13f43b</sum>
        </package>
        <package name="qt5-qtquickcontrols2-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtquickcontrols2-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtquickcontrols2-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9199ac3a0bf93b052461d3aa8b2ad55e9fd2235d8c086fd5395c22820f6d7707</sum>
        </package>
        <package name="qt5-qtmultimedia" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtmultimedia-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtmultimedia-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">965c762cebba9cc26b4342825e4ccfe98e1cd0df1cd1cefca1069dc0e9b02a31</sum>
        </package>
        <package name="qt5-qtlocation" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtlocation-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtlocation-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">96db985382de050b5b50a598d5cbf158fe2b6394daead4f516c30d9011834b52</sum>
        </package>
        <package name="python3-qt5-base" version="5.15.0" release="2.el8" epoch="0" arch="aarch64" src="python-qt5-5.15.0-2.el8.src.rpm">
          <filename>python3-qt5-base-5.15.0-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9bc89ce3bb663ee348cd7d911d5e841c6a5a223f3294c8e935bcab85ab58d243</sum>
        </package>
        <package name="qt5-qtlocation-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtlocation-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtlocation-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">a38fd41bb1e5ec9b2906b59e74a13d10d3df5e8b18aa75dadc45906731ac9581</sum>
        </package>
        <package name="qt5-qtsensors" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtsensors-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtsensors-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">aa24b28d8b26f94e99a3d7a0155440b9ce1055ca70d2bf4887e6ba5dcfc7a267</sum>
        </package>
        <package name="qt5-qtimageformats" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtimageformats-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtimageformats-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">af34d20e39be46a3da0ba1b61b0922acf87a45695bde93241811255e788a2950</sum>
        </package>
        <package name="libadwaita-qt5" version="1.2.1" release="3.el8" epoch="0" arch="aarch64" src="adwaita-qt-1.2.1-3.el8.src.rpm">
          <filename>libadwaita-qt5-1.2.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">b4f01709099997c0ae153beff092f8e8211b30de729eb9b5c5641bd7dcdfbb4f</sum>
        </package>
        <package name="qt5-qtwebchannel-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtwebchannel-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtwebchannel-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">bc113b09059bbac7041a754ebab0120b865026554fa81a0168671ca8d9eb700e</sum>
        </package>
        <package name="qt5-qtserialbus" version="5.15.2" release="3.el8" epoch="0" arch="aarch64" src="qt5-qtserialbus-5.15.2-3.el8.src.rpm">
          <filename>qt5-qtserialbus-5.15.2-3.el8.aarch64.rpm</filename>
          <sum type="sha256">bf14ed6f04615a101ef591de493b9ab02c2849295da5f8e5c5365edc22235ea9</sum>
        </package>
        <package name="qt5-qtquickcontrols2" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtquickcontrols2-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtquickcontrols2-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c0d6f6ec80d67fd519c440caf6e3daeb8e6bbf88f9ed84e893b3e2a95fec8e4b</sum>
        </package>
        <package name="qt5-qtserialport" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtserialport-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtserialport-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c13f4c4f53deb6b7e6cd36f4e8181a8ba58903eafb03e2fd0b30f71bc95c36f0</sum>
        </package>
        <package name="python3-pyqt5-sip" version="4.19.24" release="2.el8" epoch="0" arch="aarch64" src="sip-4.19.24-2.el8.src.rpm">
          <filename>python3-pyqt5-sip-4.19.24-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c233eaf1baebf99ecb099f5ef54d50d2799291cf330e694d5b774de7e73618a2</sum>
        </package>
        <package name="qt5-qtscript-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtscript-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtscript-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c2e8bebc4a6244abf1ae4173ad2c043016e3f16f1531b72ef8427877c1387967</sum>
        </package>
        <package name="qt5-qtscript" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtscript-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtscript-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c86fe93a402594467e24fdedc4331666e43db10b4a5b7b8928667758af4de147</sum>
        </package>
        <package name="qt5-qttranslations" version="5.15.2" release="1.el8" epoch="0" arch="noarch" src="qt5-qttranslations-5.15.2-1.el8.src.rpm">
          <filename>qt5-qttranslations-5.15.2-1.el8.noarch.rpm</filename>
          <sum type="sha256">c95721845421794d4d71b3142cde580773f3324d58a775b70913bba87180804c</sum>
        </package>
        <package name="qt5-qtserialport-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtserialport-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtserialport-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">dd622ed9d6e69c3e6e752e044198673313963cd087ab51361f62f147601cd668</sum>
        </package>
        <package name="qt5-qt3d-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qt3d-5.15.2-2.el8.src.rpm">
          <filename>qt5-qt3d-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">dd88cbf52a8fadb0937cc66108c27c5a522ff63d3e7b0ca02e470e50c8d78cde</sum>
        </package>
        <package name="qt5-qtconnectivity-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtconnectivity-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtconnectivity-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">dda7a1148b7e5bb8e0f6637f960d829d48155243748768fe90b0fbce066187cc</sum>
        </package>
        <package name="qt5-qtserialbus-examples" version="5.15.2" release="3.el8" epoch="0" arch="aarch64" src="qt5-qtserialbus-5.15.2-3.el8.src.rpm">
          <filename>qt5-qtserialbus-examples-5.15.2-3.el8.aarch64.rpm</filename>
          <sum type="sha256">ddfadb164895cde57c0592e4824deb3b0427706dd58691bca18b727e27043b77</sum>
        </package>
        <package name="adwaita-qt5" version="1.2.1" release="3.el8" epoch="0" arch="aarch64" src="adwaita-qt-1.2.1-3.el8.src.rpm">
          <filename>adwaita-qt5-1.2.1-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e38ba7bfe03f6ddf4fc9e592be05ff1d51db7976cf92013fdc252fb12a0737a3</sum>
        </package>
        <package name="qt5-qtmultimedia-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtmultimedia-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtmultimedia-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ecf9cf79bc00f6238bb1528b35e217565d143e07eca475f505cd1a327c2c6e23</sum>
        </package>
        <package name="qt5-qtmultimedia-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtmultimedia-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtmultimedia-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f044a5add44517fce3ad486aa4617a2204166624eba06950a78e9766e62f6d26</sum>
        </package>
        <package name="qt5-qtwebsockets-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtwebsockets-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtwebsockets-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f140e11aabe151889f5313c78104b487c7875608d83bca2e0520992f12dbd1e5</sum>
        </package>
        <package name="qt5-qtxmlpatterns-devel" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtxmlpatterns-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtxmlpatterns-devel-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f55481e4ce828c656d96d710a6cac5b2c18f6107e332e59d9671d03b06852c9c</sum>
        </package>
        <package name="qt5-qtconnectivity" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtconnectivity-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtconnectivity-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">fbf552b31f3ec201915200bd1df04916be34ad408b08027a45c1571eb234ee63</sum>
        </package>
        <package name="qt5-qtdeclarative-examples" version="5.15.2" release="2.el8" epoch="0" arch="aarch64" src="qt5-qtdeclarative-5.15.2-2.el8.src.rpm">
          <filename>qt5-qtdeclarative-examples-5.15.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">fe6dd025eacb060a99bae7de3c23f618243202b83daac46fce65c6f31c24b5f9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4235</id>
    <title>Moderate: jasper security update</title>
    <issued date="2021-11-09 08:48:32"/>
    <updated date="2021-11-09 12:56:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for jasper is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Security Fix(es):

* jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

* jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)

* jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)

* jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4235.html" id="ALSA-2021-4235" type="self" title="ALSA-2021-4235"/>
      <reference href="https://vulners.com/cve/CVE-2020-27828" id="CVE-2020-27828" type="cve" title="CVE-2020-27828"/>
      <reference href="https://vulners.com/cve/CVE-2021-26926" id="CVE-2021-26926" type="cve" title="CVE-2021-26926"/>
      <reference href="https://vulners.com/cve/CVE-2021-26927" id="CVE-2021-26927" type="cve" title="CVE-2021-26927"/>
      <reference href="https://vulners.com/cve/CVE-2021-3272" id="CVE-2021-3272" type="cve" title="CVE-2021-3272"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="jasper-libs" version="2.0.14" release="5.el8" epoch="0" arch="aarch64" src="jasper-2.0.14-5.el8.src.rpm">
          <filename>jasper-libs-2.0.14-5.el8.aarch64.rpm</filename>
          <sum type="sha256">3873876d5efbca83bba2cdbf37f7575beca9fbc0908f0dc4544564e1a58b1fdf</sum>
        </package>
        <package name="jasper-devel" version="2.0.14" release="5.el8" epoch="0" arch="aarch64" src="jasper-2.0.14-5.el8.src.rpm">
          <filename>jasper-devel-2.0.14-5.el8.aarch64.rpm</filename>
          <sum type="sha256">96266e370437661ff5881fffdeb92f42908226f8ba622b792601e1a73fa76e96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4251</id>
    <title>Moderate: openjpeg2 security update</title>
    <issued date="2021-11-09 08:51:11"/>
    <updated date="2021-11-09 12:59:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Moderate</severity>
    <summary>An update for openjpeg2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

The following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0).

Security Fix(es):

* openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389)

* openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)

* openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)

* openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)

* openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)

* openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)

* openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845)

* openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)

* openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)

* openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)

* openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)

* openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)

* openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845)

* openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4251.html" id="ALSA-2021-4251" type="self" title="ALSA-2021-4251"/>
      <reference href="https://vulners.com/cve/CVE-2018-20845" id="CVE-2018-20845" type="cve" title="CVE-2018-20845"/>
      <reference href="https://vulners.com/cve/CVE-2018-20847" id="CVE-2018-20847" type="cve" title="CVE-2018-20847"/>
      <reference href="https://vulners.com/cve/CVE-2018-5727" id="CVE-2018-5727" type="cve" title="CVE-2018-5727"/>
      <reference href="https://vulners.com/cve/CVE-2018-5785" id="CVE-2018-5785" type="cve" title="CVE-2018-5785"/>
      <reference href="https://vulners.com/cve/CVE-2019-12973" id="CVE-2019-12973" type="cve" title="CVE-2019-12973"/>
      <reference href="https://vulners.com/cve/CVE-2020-15389" id="CVE-2020-15389" type="cve" title="CVE-2020-15389"/>
      <reference href="https://vulners.com/cve/CVE-2020-27814" id="CVE-2020-27814" type="cve" title="CVE-2020-27814"/>
      <reference href="https://vulners.com/cve/CVE-2020-27823" id="CVE-2020-27823" type="cve" title="CVE-2020-27823"/>
      <reference href="https://vulners.com/cve/CVE-2020-27824" id="CVE-2020-27824" type="cve" title="CVE-2020-27824"/>
      <reference href="https://vulners.com/cve/CVE-2020-27842" id="CVE-2020-27842" type="cve" title="CVE-2020-27842"/>
      <reference href="https://vulners.com/cve/CVE-2020-27843" id="CVE-2020-27843" type="cve" title="CVE-2020-27843"/>
      <reference href="https://vulners.com/cve/CVE-2020-27845" id="CVE-2020-27845" type="cve" title="CVE-2020-27845"/>
      <reference href="https://vulners.com/cve/CVE-2021-29338" id="CVE-2021-29338" type="cve" title="CVE-2021-29338"/>
      <reference href="https://vulners.com/cve/CVE-2021-3575" id="CVE-2021-3575" type="cve" title="CVE-2021-3575"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="openjpeg2-devel-docs" version="2.4.0" release="4.el8" epoch="0" arch="noarch" src="openjpeg2-2.4.0-4.el8.src.rpm">
          <filename>openjpeg2-devel-docs-2.4.0-4.el8.noarch.rpm</filename>
          <sum type="sha256">6bde46ae06a70b193e567d4a8cc186b7976a1e7dee9984b44020a9840d82a9c2</sum>
        </package>
        <package name="openjpeg2-devel" version="2.4.0" release="4.el8" epoch="0" arch="aarch64" src="openjpeg2-2.4.0-4.el8.src.rpm">
          <filename>openjpeg2-devel-2.4.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">97a4e5404c0faf20d1c15932982805508bb4566458e282a644b6c09cbea8edb7</sum>
        </package>
        <package name="openjpeg2" version="2.4.0" release="4.el8" epoch="0" arch="aarch64" src="openjpeg2-2.4.0-4.el8.src.rpm">
          <filename>openjpeg2-2.4.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">99be2e41c35001971460010569be92c7d3598df29ce60b873379c84ed3ecc4fa</sum>
        </package>
        <package name="openjpeg2-tools" version="2.4.0" release="4.el8" epoch="0" arch="aarch64" src="openjpeg2-2.4.0-4.el8.src.rpm">
          <filename>openjpeg2-tools-2.4.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">ff30d2db507c005744b79a585fc52a7f9408cc7f56f2eee6d13790fd62f733d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4256</id>
    <title>Moderate: graphviz security update</title>
    <issued date="2021-11-09 08:52:05"/>
    <updated date="2021-11-09 12:59:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for graphviz is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Graphviz is open-source graph-visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics, software engineering, database and web design, machine learning, and in visual interfaces for other technical domains.

Security Fix(es):

* graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (CVE-2020-18032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4256.html" id="ALSA-2021-4256" type="self" title="ALSA-2021-4256"/>
      <reference href="https://vulners.com/cve/CVE-2020-18032" id="CVE-2020-18032" type="cve" title="CVE-2020-18032"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="graphviz-python3" version="2.40.1" release="43.el8" epoch="0" arch="aarch64" src="graphviz-2.40.1-43.el8.src.rpm">
          <filename>graphviz-python3-2.40.1-43.el8.aarch64.rpm</filename>
          <sum type="sha256">090a07221bfc905a02be2538981b6babf9983de51cd9dcb6729b78cfb61fa00d</sum>
        </package>
        <package name="graphviz-devel" version="2.40.1" release="43.el8" epoch="0" arch="aarch64" src="graphviz-2.40.1-43.el8.src.rpm">
          <filename>graphviz-devel-2.40.1-43.el8.aarch64.rpm</filename>
          <sum type="sha256">30a2284807d34b8eae2c08d301e7ccd327c00c460646a613a5ba2d9ef586b631</sum>
        </package>
        <package name="graphviz" version="2.40.1" release="43.el8" epoch="0" arch="aarch64" src="graphviz-2.40.1-43.el8.src.rpm">
          <filename>graphviz-2.40.1-43.el8.aarch64.rpm</filename>
          <sum type="sha256">52ae3a0a02e5f88f62585c15185af4f2f29b8e390c55a82231dd5e70496ffe60</sum>
        </package>
        <package name="graphviz-doc" version="2.40.1" release="43.el8" epoch="0" arch="aarch64" src="graphviz-2.40.1-43.el8.src.rpm">
          <filename>graphviz-doc-2.40.1-43.el8.aarch64.rpm</filename>
          <sum type="sha256">9186b6f213984fcc29a6fdac9b4a2e2f3dd9e64ea0b0d5a0ca944f563e4b0be8</sum>
        </package>
        <package name="graphviz-gd" version="2.40.1" release="43.el8" epoch="0" arch="aarch64" src="graphviz-2.40.1-43.el8.src.rpm">
          <filename>graphviz-gd-2.40.1-43.el8.aarch64.rpm</filename>
          <sum type="sha256">91ab54c294a13794411fbb73da7084d07099e6bdf03fc57d42bbd40da9e130de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4288</id>
    <title>Moderate: libjpeg-turbo security and bug fix update</title>
    <issued date="2021-11-09 08:56:07"/>
    <updated date="2021-11-09 13:01:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libjpeg-turbo is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: Stack-based buffer overflow in the "transform" component (CVE-2020-17541)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4288.html" id="ALSA-2021-4288" type="self" title="ALSA-2021-4288"/>
      <reference href="https://vulners.com/cve/CVE-2020-17541" id="CVE-2020-17541" type="cve" title="CVE-2020-17541"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libjpeg-turbo-devel" version="1.5.3" release="12.el8" epoch="0" arch="aarch64" src="libjpeg-turbo-1.5.3-12.el8.src.rpm">
          <filename>libjpeg-turbo-devel-1.5.3-12.el8.aarch64.rpm</filename>
          <sum type="sha256">19da1a1e0f23fa5af9345088827db9c6750ee31ee501cc441e63dd5c5edfb01a</sum>
        </package>
        <package name="turbojpeg-devel" version="1.5.3" release="12.el8" epoch="0" arch="aarch64" src="libjpeg-turbo-1.5.3-12.el8.src.rpm">
          <filename>turbojpeg-devel-1.5.3-12.el8.aarch64.rpm</filename>
          <sum type="sha256">7fd1fa812ca4a18bba799b17af2da7a8de928c9d58e98c318c837b613d457f04</sum>
        </package>
        <package name="libjpeg-turbo" version="1.5.3" release="12.el8" epoch="0" arch="aarch64" src="libjpeg-turbo-1.5.3-12.el8.src.rpm">
          <filename>libjpeg-turbo-1.5.3-12.el8.aarch64.rpm</filename>
          <sum type="sha256">8a5853d86c31cbe3ac5f89338c84739684fca01fb4acf16c54ab398f37d82d04</sum>
        </package>
        <package name="turbojpeg" version="1.5.3" release="12.el8" epoch="0" arch="aarch64" src="libjpeg-turbo-1.5.3-12.el8.src.rpm">
          <filename>turbojpeg-1.5.3-12.el8.aarch64.rpm</filename>
          <sum type="sha256">edca5dc656de9f1a1b210c10db5e64491b77f79d44b4ec1544e80750800008c2</sum>
        </package>
        <package name="libjpeg-turbo-utils" version="1.5.3" release="12.el8" epoch="0" arch="aarch64" src="libjpeg-turbo-1.5.3-12.el8.src.rpm">
          <filename>libjpeg-turbo-utils-1.5.3-12.el8.aarch64.rpm</filename>
          <sum type="sha256">fb5bed56ebc6dbcae8036c559c408e7fc11c5ae9e2ab31608eaee0b8f59df15a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4316</id>
    <title>Low: zziplib security update</title>
    <issued date="2021-11-09 08:59:11"/>
    <updated date="2021-11-09 13:02:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Low</severity>
    <summary>An update for zziplib is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file() (CVE-2020-18442)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4316.html" id="ALSA-2021-4316" type="self" title="ALSA-2021-4316"/>
      <reference href="https://vulners.com/cve/CVE-2020-18442" id="CVE-2020-18442" type="cve" title="CVE-2020-18442"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="zziplib" version="0.13.68" release="9.el8" epoch="0" arch="aarch64" src="zziplib-0.13.68-9.el8.src.rpm">
          <filename>zziplib-0.13.68-9.el8.aarch64.rpm</filename>
          <sum type="sha256">2764da3923d477c4a857eb3aea37de969f1af911dbf8ee9585fc4b982fd8d6bd</sum>
        </package>
        <package name="zziplib-utils" version="0.13.68" release="9.el8" epoch="0" arch="aarch64" src="zziplib-0.13.68-9.el8.src.rpm">
          <filename>zziplib-utils-0.13.68-9.el8.aarch64.rpm</filename>
          <sum type="sha256">541edbccbb8fd3f457589cd00e423baa66d4141e0c30b8d0967be8b059d7efd7</sum>
        </package>
        <package name="zziplib-devel" version="0.13.68" release="9.el8" epoch="0" arch="aarch64" src="zziplib-0.13.68-9.el8.src.rpm">
          <filename>zziplib-devel-0.13.68-9.el8.aarch64.rpm</filename>
          <sum type="sha256">f3aa81afa8078bcdb597f138a03e32bcb0c5e066faddb586f1248a6740bb4ba8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4325</id>
    <title>Moderate: lasso security and enhancement update</title>
    <issued date="2021-11-09 09:01:05"/>
    <updated date="2021-11-09 13:02:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for lasso is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

Security Fix(es):

* lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4325.html" id="ALSA-2021-4325" type="self" title="ALSA-2021-4325"/>
      <reference href="https://vulners.com/cve/CVE-2021-28091" id="CVE-2021-28091" type="cve" title="CVE-2021-28091"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="lasso" version="2.6.0" release="12.el8" epoch="0" arch="aarch64" src="lasso-2.6.0-12.el8.src.rpm">
          <filename>lasso-2.6.0-12.el8.aarch64.rpm</filename>
          <sum type="sha256">32cea56bc0c21730fd725e07d0c24d9df242fa451878fd2f254c3d4c78a97903</sum>
        </package>
        <package name="lasso-devel" version="2.6.0" release="12.el8" epoch="0" arch="aarch64" src="lasso-2.6.0-12.el8.src.rpm">
          <filename>lasso-devel-2.6.0-12.el8.aarch64.rpm</filename>
          <sum type="sha256">79743097671a0e4a35a66dd91684775087f208382881bfcc7e26f43e4bdd637a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4339</id>
    <title>Moderate: grilo security update</title>
    <issued date="2021-11-09 09:02:57"/>
    <updated date="2021-11-09 13:03:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for grilo is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Grilo is a framework that provides access to different sources of multimedia content, using a pluggable system. The grilo package contains the core library and elements.

Security Fix(es):

* grilo: missing TLS certificate verification (CVE-2021-39365)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4339.html" id="ALSA-2021-4339" type="self" title="ALSA-2021-4339"/>
      <reference href="https://vulners.com/cve/CVE-2021-39365" id="CVE-2021-39365" type="cve" title="CVE-2021-39365"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="grilo" version="0.3.6" release="3.el8" epoch="0" arch="aarch64" src="grilo-0.3.6-3.el8.src.rpm">
          <filename>grilo-0.3.6-3.el8.aarch64.rpm</filename>
          <sum type="sha256">0ce2ea252c4cd7bff593eed6b00c23a1e578b41f9ab0f470daa885b596124d4c</sum>
        </package>
        <package name="grilo-devel" version="0.3.6" release="3.el8" epoch="0" arch="aarch64" src="grilo-0.3.6-3.el8.src.rpm">
          <filename>grilo-devel-0.3.6-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e024589abe9d3a08ae3f3a8a69d97cd4c725cc719cf87baeee03007c400fab3b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4373</id>
    <title>Low: pcre security update</title>
    <issued date="2021-11-09 09:12:45"/>
    <updated date="2021-11-09 13:08:17"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Low</severity>
    <summary>An update for pcre is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>PCRE is a Perl-compatible regular expression library. 

Security Fix(es):

* pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 (CVE-2019-20838)

* pcre: Integer overflow when parsing callout numeric arguments (CVE-2020-14155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4373.html" id="ALSA-2021-4373" type="self" title="ALSA-2021-4373"/>
      <reference href="https://vulners.com/cve/CVE-2019-20838" id="CVE-2019-20838" type="cve" title="CVE-2019-20838"/>
      <reference href="https://vulners.com/cve/CVE-2020-14155" id="CVE-2020-14155" type="cve" title="CVE-2020-14155"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="pcre-devel" version="8.42" release="6.el8" epoch="0" arch="aarch64" src="pcre-8.42-6.el8.src.rpm">
          <filename>pcre-devel-8.42-6.el8.aarch64.rpm</filename>
          <sum type="sha256">28fa5e6f9709b613f44d9630b67127d63d471355f547221b2229caff049c08c9</sum>
        </package>
        <package name="pcre" version="8.42" release="6.el8" epoch="0" arch="aarch64" src="pcre-8.42-6.el8.src.rpm">
          <filename>pcre-8.42-6.el8.aarch64.rpm</filename>
          <sum type="sha256">4190bcd9a67dfa0ca28344ce887208fdd81023a0e52046509466d41b64581020</sum>
        </package>
        <package name="pcre-utf32" version="8.42" release="6.el8" epoch="0" arch="aarch64" src="pcre-8.42-6.el8.src.rpm">
          <filename>pcre-utf32-8.42-6.el8.aarch64.rpm</filename>
          <sum type="sha256">a3d5eeeb1c04efbc06e575bafbeead3785078d95e63dc49f26b3d1221a3ebb40</sum>
        </package>
        <package name="pcre-cpp" version="8.42" release="6.el8" epoch="0" arch="aarch64" src="pcre-8.42-6.el8.src.rpm">
          <filename>pcre-cpp-8.42-6.el8.aarch64.rpm</filename>
          <sum type="sha256">b7153ea9800ff8d2c4aef4da5be842608beb415281c9cf8ea37b399b0329a514</sum>
        </package>
        <package name="pcre-static" version="8.42" release="6.el8" epoch="0" arch="aarch64" src="pcre-8.42-6.el8.src.rpm">
          <filename>pcre-static-8.42-6.el8.aarch64.rpm</filename>
          <sum type="sha256">d866d6022eb9fb21b35c33573f0f1f1a311a3558d8bcbec42a117465de889d3e</sum>
        </package>
        <package name="pcre-utf16" version="8.42" release="6.el8" epoch="0" arch="aarch64" src="pcre-8.42-6.el8.src.rpm">
          <filename>pcre-utf16-8.42-6.el8.aarch64.rpm</filename>
          <sum type="sha256">f625bbac0adc7e9feb701095828f9abe4588359ff55f7a125f36625b304f0a74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4374</id>
    <title>Moderate: file security update</title>
    <issued date="2021-11-09 09:13:30"/>
    <updated date="2021-11-09 13:09:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for file is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format (ELF) binary files, system libraries, RPM packages, and different graphics formats.

Security Fix(es):

* file: heap-based buffer overflow in cdf_read_property_info in cdf.c (CVE-2019-18218)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4374.html" id="ALSA-2021-4374" type="self" title="ALSA-2021-4374"/>
      <reference href="https://vulners.com/cve/CVE-2019-18218" id="CVE-2019-18218" type="cve" title="CVE-2019-18218"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="file-devel" version="5.33" release="20.el8" epoch="0" arch="aarch64" src="file-5.33-20.el8.src.rpm">
          <filename>file-devel-5.33-20.el8.aarch64.rpm</filename>
          <sum type="sha256">69bf90a1c2d9f6ffd18be854fbb1c7ffc752109d3c74f31fd2006179ef1a7dd5</sum>
        </package>
        <package name="file" version="5.33" release="20.el8" epoch="0" arch="aarch64" src="file-5.33-20.el8.src.rpm">
          <filename>file-5.33-20.el8.aarch64.rpm</filename>
          <sum type="sha256">7edc703ad5702df36cb92bc01ab139d6436d869e843d23cdfb0001b7f6a5fbd3</sum>
        </package>
        <package name="python3-magic" version="5.33" release="20.el8" epoch="0" arch="noarch" src="file-5.33-20.el8.src.rpm">
          <filename>python3-magic-5.33-20.el8.noarch.rpm</filename>
          <sum type="sha256">a1f8013dde5ce1bff68a804a1bd7c7f85b7ef3848d3b9621945c1b026c19957f</sum>
        </package>
        <package name="file-libs" version="5.33" release="20.el8" epoch="0" arch="aarch64" src="file-5.33-20.el8.src.rpm">
          <filename>file-libs-5.33-20.el8.aarch64.rpm</filename>
          <sum type="sha256">b4c16671a545a9f066105acd1065c7434618de9fdafeb2601fc480365c7f8760</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4381</id>
    <title>Moderate: GNOME security, bug fix, and enhancement update</title>
    <issued date="2021-11-09 09:15:15"/>
    <updated date="2021-11-09 13:10:06"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>Moderate</severity>
    <summary>An update for GNOME is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GNOME is the default desktop environment of AlmaLinux.

The following packages have been upgraded to a later upstream version: gdm (40.0), webkit2gtk3 (2.32.3). (BZ#1909300)

Security Fix(es):

* webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution (CVE-2020-13558)

* LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918)

* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-1788)

* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789)

* webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799)

* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1801)

* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844)

* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870)

* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1871)

* webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution (CVE-2021-21775)

* webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution (CVE-2021-21779)

* webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution (CVE-2021-21806)

* webkitgtk: Integer overflow leading to arbitrary code execution (CVE-2021-30663)

* webkitgtk: Memory corruption leading to arbitrary code execution (CVE-2021-30665)

* webkitgtk: Logic issue leading to leak of sensitive user information (CVE-2021-30682)

* webkitgtk: Logic issue leading to universal cross site scripting attack (CVE-2021-30689)

* webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers (CVE-2021-30720)

* webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30734)

* webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack (CVE-2021-30744)

* webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30749)

* webkitgtk: Type confusion leading to arbitrary code execution (CVE-2021-30758)

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30795)

* webkitgtk: Insufficient checks leading to arbitrary code execution (CVE-2021-30797)

* webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30799)

* webkitgtk: User may be unable to fully delete browsing history (CVE-2020-29623)

* gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory (CVE-2020-36241)

* gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory (incomplete CVE-2020-36241 fix) (CVE-2021-28650)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4381.html" id="ALSA-2021-4381" type="self" title="ALSA-2021-4381"/>
      <reference href="https://vulners.com/cve/CVE-2020-13558" id="CVE-2020-13558" type="cve" title="CVE-2020-13558"/>
      <reference href="https://vulners.com/cve/CVE-2020-24870" id="CVE-2020-24870" type="cve" title="CVE-2020-24870"/>
      <reference href="https://vulners.com/cve/CVE-2020-27918" id="CVE-2020-27918" type="cve" title="CVE-2020-27918"/>
      <reference href="https://vulners.com/cve/CVE-2020-29623" id="CVE-2020-29623" type="cve" title="CVE-2020-29623"/>
      <reference href="https://vulners.com/cve/CVE-2020-36241" id="CVE-2020-36241" type="cve" title="CVE-2020-36241"/>
      <reference href="https://vulners.com/cve/CVE-2021-1765" id="CVE-2021-1765" type="cve" title="CVE-2021-1765"/>
      <reference href="https://vulners.com/cve/CVE-2021-1788" id="CVE-2021-1788" type="cve" title="CVE-2021-1788"/>
      <reference href="https://vulners.com/cve/CVE-2021-1789" id="CVE-2021-1789" type="cve" title="CVE-2021-1789"/>
      <reference href="https://vulners.com/cve/CVE-2021-1799" id="CVE-2021-1799" type="cve" title="CVE-2021-1799"/>
      <reference href="https://vulners.com/cve/CVE-2021-1801" id="CVE-2021-1801" type="cve" title="CVE-2021-1801"/>
      <reference href="https://vulners.com/cve/CVE-2021-1844" id="CVE-2021-1844" type="cve" title="CVE-2021-1844"/>
      <reference href="https://vulners.com/cve/CVE-2021-1870" id="CVE-2021-1870" type="cve" title="CVE-2021-1870"/>
      <reference href="https://vulners.com/cve/CVE-2021-1871" id="CVE-2021-1871" type="cve" title="CVE-2021-1871"/>
      <reference href="https://vulners.com/cve/CVE-2021-21775" id="CVE-2021-21775" type="cve" title="CVE-2021-21775"/>
      <reference href="https://vulners.com/cve/CVE-2021-21779" id="CVE-2021-21779" type="cve" title="CVE-2021-21779"/>
      <reference href="https://vulners.com/cve/CVE-2021-21806" id="CVE-2021-21806" type="cve" title="CVE-2021-21806"/>
      <reference href="https://vulners.com/cve/CVE-2021-28650" id="CVE-2021-28650" type="cve" title="CVE-2021-28650"/>
      <reference href="https://vulners.com/cve/CVE-2021-30663" id="CVE-2021-30663" type="cve" title="CVE-2021-30663"/>
      <reference href="https://vulners.com/cve/CVE-2021-30665" id="CVE-2021-30665" type="cve" title="CVE-2021-30665"/>
      <reference href="https://vulners.com/cve/CVE-2021-30682" id="CVE-2021-30682" type="cve" title="CVE-2021-30682"/>
      <reference href="https://vulners.com/cve/CVE-2021-30689" id="CVE-2021-30689" type="cve" title="CVE-2021-30689"/>
      <reference href="https://vulners.com/cve/CVE-2021-30720" id="CVE-2021-30720" type="cve" title="CVE-2021-30720"/>
      <reference href="https://vulners.com/cve/CVE-2021-30734" id="CVE-2021-30734" type="cve" title="CVE-2021-30734"/>
      <reference href="https://vulners.com/cve/CVE-2021-30744" id="CVE-2021-30744" type="cve" title="CVE-2021-30744"/>
      <reference href="https://vulners.com/cve/CVE-2021-30749" id="CVE-2021-30749" type="cve" title="CVE-2021-30749"/>
      <reference href="https://vulners.com/cve/CVE-2021-30758" id="CVE-2021-30758" type="cve" title="CVE-2021-30758"/>
      <reference href="https://vulners.com/cve/CVE-2021-30795" id="CVE-2021-30795" type="cve" title="CVE-2021-30795"/>
      <reference href="https://vulners.com/cve/CVE-2021-30797" id="CVE-2021-30797" type="cve" title="CVE-2021-30797"/>
      <reference href="https://vulners.com/cve/CVE-2021-30799" id="CVE-2021-30799" type="cve" title="CVE-2021-30799"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gnome-software-devel" version="3.36.1" release="10.el8" epoch="0" arch="aarch64" src="gnome-software-3.36.1-10.el8.src.rpm">
          <filename>gnome-software-devel-3.36.1-10.el8.aarch64.rpm</filename>
          <sum type="sha256">9273b479534b2fedc6e525165e98bb31b708d0f1073c9a845368d539e95e3ab0</sum>
        </package>
        <package name="gnome-autoar" version="0.2.3" release="2.el8" epoch="0" arch="aarch64" src="gnome-autoar-0.2.3-2.el8.src.rpm">
          <filename>gnome-autoar-0.2.3-2.el8.aarch64.rpm</filename>
          <sum type="sha256">97e173e0846f518f95c83668d87859f4bb256e4bb1e6cd545226808378a8e57f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4510</id>
    <title>Low: lua security update</title>
    <issued date="2021-11-09 09:37:44"/>
    <updated date="2021-11-09 13:21:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Low</severity>
    <summary>An update for lua is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

* lua: segmentation fault in getlocal and setlocal functions in ldebug.c (CVE-2020-24370)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4510.html" id="ALSA-2021-4510" type="self" title="ALSA-2021-4510"/>
      <reference href="https://vulners.com/cve/CVE-2020-24370" id="CVE-2020-24370" type="cve" title="CVE-2020-24370"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="lua" version="5.3.4" release="12.el8" epoch="0" arch="aarch64" src="lua-5.3.4-12.el8.src.rpm">
          <filename>lua-5.3.4-12.el8.aarch64.rpm</filename>
          <sum type="sha256">10d03b39e3f7727403dfbf0af81505da966b6ee4d3c07a2a785894a3b353cbc0</sum>
        </package>
        <package name="lua-devel" version="5.3.4" release="12.el8" epoch="0" arch="aarch64" src="lua-5.3.4-12.el8.src.rpm">
          <filename>lua-devel-5.3.4-12.el8.aarch64.rpm</filename>
          <sum type="sha256">237cf3b2943fc9ccf4cb416426327a1da1a02ce34a02d8ce6926aac4407c75ad</sum>
        </package>
        <package name="lua-libs" version="5.3.4" release="12.el8" epoch="0" arch="aarch64" src="lua-5.3.4-12.el8.src.rpm">
          <filename>lua-libs-5.3.4-12.el8.aarch64.rpm</filename>
          <sum type="sha256">c26cd5535001b7f0aab05be397283ba2820e4ac7563a1bae345537eaa6c8c71a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4513</id>
    <title>Moderate: libsepol security update</title>
    <issued date="2021-11-09 09:39:50"/>
    <updated date="2021-11-09 13:21:28"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libsepol is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libsepol library provides an API for the manipulation of SELinux binary policies. It is used by checkpolicy (the policy compiler) and similar tools, as well as by programs like load_policy that need to perform specific transformations on binary policies (for example, customizing policy boolean settings).

Security Fix(es):

* libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36084)

* libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36085)

* libsepol: use-after-free in cil_reset_classpermission() (CVE-2021-36086)

* libsepol: heap-based buffer overflow in ebitmap_match_any() (CVE-2021-36087)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4513.html" id="ALSA-2021-4513" type="self" title="ALSA-2021-4513"/>
      <reference href="https://vulners.com/cve/CVE-2021-36084" id="CVE-2021-36084" type="cve" title="CVE-2021-36084"/>
      <reference href="https://vulners.com/cve/CVE-2021-36085" id="CVE-2021-36085" type="cve" title="CVE-2021-36085"/>
      <reference href="https://vulners.com/cve/CVE-2021-36086" id="CVE-2021-36086" type="cve" title="CVE-2021-36086"/>
      <reference href="https://vulners.com/cve/CVE-2021-36087" id="CVE-2021-36087" type="cve" title="CVE-2021-36087"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsepol-devel" version="2.9" release="3.el8" epoch="0" arch="aarch64" src="libsepol-2.9-3.el8.src.rpm">
          <filename>libsepol-devel-2.9-3.el8.aarch64.rpm</filename>
          <sum type="sha256">22861e6970e9753327ad9b27fb8f51d08918d5eb2da0252d3ed5e394c32b4c45</sum>
        </package>
        <package name="libsepol-static" version="2.9" release="3.el8" epoch="0" arch="aarch64" src="libsepol-2.9-3.el8.src.rpm">
          <filename>libsepol-static-2.9-3.el8.aarch64.rpm</filename>
          <sum type="sha256">6aaf373dd3473602e7633f7c033c2520e6a80fbe70753930ebeb9ebe8b721703</sum>
        </package>
        <package name="libsepol" version="2.9" release="3.el8" epoch="0" arch="aarch64" src="libsepol-2.9-3.el8.src.rpm">
          <filename>libsepol-2.9-3.el8.aarch64.rpm</filename>
          <sum type="sha256">fe4f2ec60ea667b93d4a8d4cd70370f98d52d3ef3983798d918a526104d258fb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2021:4519</id>
    <title>Moderate: autotrace security update</title>
    <issued date="2021-11-09 09:40:34"/>
    <updated date="2021-11-09 13:22:51"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for autotrace is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

* autotrace: integer overflow in input-bmp.c (CVE-2019-19004)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4519.html" id="ALSA-2021-4519" type="self" title="ALSA-2021-4519"/>
      <reference href="https://vulners.com/cve/CVE-2019-19004" id="CVE-2019-19004" type="cve" title="CVE-2019-19004"/>
      <reference href="https://vulners.com/cve/CVE-2019-19005" id="CVE-2019-19005" type="cve" title="CVE-2019-19005"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="autotrace" version="0.31.1" release="53.el8" epoch="0" arch="aarch64" src="autotrace-0.31.1-53.el8.src.rpm">
          <filename>autotrace-0.31.1-53.el8.aarch64.rpm</filename>
          <sum type="sha256">b3f8240f16f33419863e6333b47b1ddba7b86e0e26f11a68fd473edcc17003f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:4585</id>
    <title>Moderate: gcc-toolset-10-gcc security update</title>
    <issued date="2021-11-10 08:31:42"/>
    <updated date="2021-11-10 08:31:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for gcc-toolset-10-gcc is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

* Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574)

The following changes were introduced in gcc in order to facilitate detection of BiDi Unicode characters:

This update implements a new warning option -Wbidirectional to warn about possibly dangerous bidirectional characters.

There are three levels of warning supported by gcc:
"-Wbidirectional=unpaired", which warns about improperly terminated BiDi contexts. (This is the default.)
"-Wbidirectional=none", which turns the warning off.
"-Wbidirectional=any", which warns about any use of bidirectional characters.

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4585.html" id="ALSA-2021-4585" type="self" title="ALSA-2021-4585"/>
      <reference href="https://vulners.com/cve/CVE-2021-42574" id="CVE-2021-42574" type="cve" title="CVE-2021-42574"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="gcc-toolset-10-libtsan-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libtsan-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">0282e71c1d44ef34acaf82bdc83dcb20b110fc592c5140345e74b9d13a65b78c</sum>
        </package>
        <package name="gcc-toolset-10-gcc" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-gcc-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">1bd7804331bb3b6ef53dfc1cefbbd8a56a1cff5cd4a879028e67b4e46c1fbd7c</sum>
        </package>
        <package name="gcc-toolset-10-gcc-plugin-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-gcc-plugin-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">3bbac294f14aa1eff93fc901344bf296e1af6b7c966529f4907a14c35ea564c5</sum>
        </package>
        <package name="gcc-toolset-10-libatomic-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libatomic-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">3e0d58af6b390871202c2f0f940b64b3651c9f6eb55e8fe7f8170614fdd6608f</sum>
        </package>
        <package name="gcc-toolset-10-libstdc++-docs" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libstdc++-docs-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">4281d4d55772b6c17e6b87b53059dde1bb8aae37b08371fb51a43d8962e295b2</sum>
        </package>
        <package name="gcc-toolset-10-gcc-gdb-plugin" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-gcc-gdb-plugin-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">7a09a571b3a6c2aac0ad7fbb887ede1d3f018dafa8e68114bcbf2f1251346f3d</sum>
        </package>
        <package name="gcc-toolset-10-libitm-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libitm-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">87739c16c963218956c943185939fe76565911188d0ebda1bb5726bcb7945023</sum>
        </package>
        <package name="gcc-toolset-10-libasan-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libasan-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">9138eabb48d7b4ba30e0e2f1321aac14f0e9082f0838cbc2ee20103eb2c032e6</sum>
        </package>
        <package name="gcc-toolset-10-liblsan-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-liblsan-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">9c57673314654a02c96375c07f0ce1b1bf0a66656a11183311c606597ab101a6</sum>
        </package>
        <package name="gcc-toolset-10-gcc-gfortran" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-gcc-gfortran-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">a9045e80ef7535620d9eebd52b194d46494d3e670b20b2104213090fabfb57d3</sum>
        </package>
        <package name="gcc-toolset-10-libubsan-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libubsan-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">da87e1d40e7652f1a71cf0266472c0a60f24d9a042d7b7d30398831664ea2ea1</sum>
        </package>
        <package name="gcc-toolset-10-libstdc++-devel" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-libstdc++-devel-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">e5e658a7c767328b12b091fed8f19c55ac6d5d8a7da67843043e9618cea1d12e</sum>
        </package>
        <package name="gcc-toolset-10-gcc-c++" version="10.3.1" release="1.2.el8_5" epoch="0" arch="aarch64" src="gcc-toolset-10-gcc-10.3.1-1.2.el8_5.src.rpm">
          <filename>gcc-toolset-10-gcc-c++-10.3.1-1.2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">f32b98571e82186a59bf7e8661cb67e82d3f21ae2f0bd8bcc5c4afb553f624a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2021:4622</id>
    <title>Important: freerdp security update</title>
    <issued date="2021-11-11 09:34:33"/>
    <updated date="2021-11-11 09:34:33"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Important</severity>
    <summary>An update for freerdp is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: improper client input validation for gateway connections allows to overwrite memory (CVE-2021-41159)

* freerdp: improper region checks in all clients allow out of bound write to memory (CVE-2021-41160)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2021-4622.html" id="ALSA-2021-4622" type="self" title="ALSA-2021-4622"/>
      <reference href="https://vulners.com/cve/CVE-2021-41159" id="CVE-2021-41159" type="cve" title="CVE-2021-41159"/>
      <reference href="https://vulners.com/cve/CVE-2021-41160" id="CVE-2021-41160" type="cve" title="CVE-2021-41160"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libwinpr" version="2.2.0" release="7.el8_5" epoch="2" arch="aarch64" src="freerdp-2.2.0-7.el8_5.src.rpm">
          <filename>libwinpr-2.2.0-7.el8_5.aarch64.rpm</filename>
          <sum type="sha256">0eff093a7a01c558af9544caa3c1a2e059b375004c80249fbabe70bfeef17f1a</sum>
        </package>
        <package name="libwinpr-devel" version="2.2.0" release="7.el8_5" epoch="2" arch="aarch64" src="freerdp-2.2.0-7.el8_5.src.rpm">
          <filename>libwinpr-devel-2.2.0-7.el8_5.aarch64.rpm</filename>
          <sum type="sha256">438be48577bea29d7273f71a818011d4d1c2f324fecfd2e5ac2769c27d6a92f2</sum>
        </package>
        <package name="freerdp" version="2.2.0" release="7.el8_5" epoch="2" arch="aarch64" src="freerdp-2.2.0-7.el8_5.src.rpm">
          <filename>freerdp-2.2.0-7.el8_5.aarch64.rpm</filename>
          <sum type="sha256">76dfe092d38dd88c8d664ae39b87593a39bab1402b424dcc697ed3abbae541de</sum>
        </package>
        <package name="freerdp-devel" version="2.2.0" release="7.el8_5" epoch="2" arch="aarch64" src="freerdp-2.2.0-7.el8_5.src.rpm">
          <filename>freerdp-devel-2.2.0-7.el8_5.aarch64.rpm</filename>
          <sum type="sha256">7f991786b1f7d0a8bf81b5bec4a3e93ceaf7f8135ea357df0c67dc3a3a222d27</sum>
        </package>
        <package name="freerdp-libs" version="2.2.0" release="7.el8_5" epoch="2" arch="aarch64" src="freerdp-2.2.0-7.el8_5.src.rpm">
          <filename>freerdp-libs-2.2.0-7.el8_5.aarch64.rpm</filename>
          <sum type="sha256">de4dbe74e2c79c989932817c841f839163b208353805fc1e67e326eb601ddb84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2022:0643</id>
    <title>Important: python-pillow security update</title>
    <issued date="2022-02-22 17:25:31"/>
    <updated date="2022-02-22 17:25:31"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Important</severity>
    <summary>An update for python-pillow is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions (CVE-2022-22817)

* python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c (CVE-2022-22816)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-0643.html" id="ALSA-2022-0643" type="self" title="ALSA-2022-0643"/>
      <reference href="https://vulners.com/cve/CVE-2022-22815" id="CVE-2022-22815" type="cve" title="CVE-2022-22815"/>
      <reference href="https://vulners.com/cve/CVE-2022-22816" id="CVE-2022-22816" type="cve" title="CVE-2022-22816"/>
      <reference href="https://vulners.com/cve/CVE-2022-22817" id="CVE-2022-22817" type="cve" title="CVE-2022-22817"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="python3-pillow-tk" version="5.1.1" release="18.el8_5" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-tk-5.1.1-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">1d6a2627dcccb3628b027f7b5abc0d7b8920f705d9fd5ae5f9fd1c000a3246b1</sum>
        </package>
        <package name="python3-pillow-doc" version="5.1.1" release="18.el8_5" epoch="0" arch="noarch" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-doc-5.1.1-18.el8_5.noarch.rpm</filename>
          <sum type="sha256">77fcdc9fd93c5f375179289519ef43064b05c10f2143c390fd08af864328395b</sum>
        </package>
        <package name="python3-pillow" version="5.1.1" release="18.el8_5" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-5.1.1-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">9412c36401f155e24a2ed98ce2a799a859b2fa687db657ecfb742bdd12c2221c</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="18.el8_5" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_5.src.rpm">
          <filename>python3-pillow-devel-5.1.1-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">fca3f1ed8832dc1865388f1847a18190d36c5ac8326b7f9c0cc46a122b88cfb3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:0892</id>
    <title>Moderate: libarchive security update</title>
    <issued date="2022-03-15 09:11:33"/>
    <updated date="2022-03-15 09:11:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libarchive is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: extracting a symlink with ACLs modifies ACLs of target (CVE-2021-23177)

* libarchive: symbolic links incorrectly followed when changing modes, times, ACL and flags of a file while extracting an archive (CVE-2021-31566)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-0892.html" id="ALSA-2022-0892" type="self" title="ALSA-2022-0892"/>
      <reference href="https://vulners.com/cve/CVE-2021-23177" id="CVE-2021-23177" type="cve" title="CVE-2021-23177"/>
      <reference href="https://vulners.com/cve/CVE-2021-31566" id="CVE-2021-31566" type="cve" title="CVE-2021-31566"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libarchive-devel" version="3.3.3" release="3.el8_5" epoch="0" arch="aarch64" src="libarchive-3.3.3-3.el8_5.src.rpm">
          <filename>libarchive-devel-3.3.3-3.el8_5.aarch64.rpm</filename>
          <sum type="sha256">746e6c45942a3823fea711ec28cc7e78c4051ad081383a9d2f2b33c956638993</sum>
        </package>
        <package name="bsdtar" version="3.3.3" release="3.el8_5" epoch="0" arch="aarch64" src="libarchive-3.3.3-3.el8_5.src.rpm">
          <filename>bsdtar-3.3.3-3.el8_5.aarch64.rpm</filename>
          <sum type="sha256">86058a281800908bff8046531f0eeff23a4acd6ce2cbaa9771ccfd29cda8a60f</sum>
        </package>
        <package name="libarchive" version="3.3.3" release="3.el8_5" epoch="0" arch="aarch64" src="libarchive-3.3.3-3.el8_5.src.rpm">
          <filename>libarchive-3.3.3-3.el8_5.aarch64.rpm</filename>
          <sum type="sha256">9dee1e6258e3551315ccf1e6ecd85f699aea52aa6d86954203f52c7bd1ce7a0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1442</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2022-04-20 12:24:01"/>
    <updated date="2022-04-20 12:24:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Important</severity>
    <summary>An update for java-11-openjdk is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)

* OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)

* OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)

* OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)

* OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1442.html" id="ALSA-2022-1442" type="self" title="ALSA-2022-1442"/>
      <reference href="https://vulners.com/cve/CVE-2022-21426" id="CVE-2022-21426" type="cve" title="CVE-2022-21426"/>
      <reference href="https://vulners.com/cve/CVE-2022-21434" id="CVE-2022-21434" type="cve" title="CVE-2022-21434"/>
      <reference href="https://vulners.com/cve/CVE-2022-21443" id="CVE-2022-21443" type="cve" title="CVE-2022-21443"/>
      <reference href="https://vulners.com/cve/CVE-2022-21476" id="CVE-2022-21476" type="cve" title="CVE-2022-21476"/>
      <reference href="https://vulners.com/cve/CVE-2022-21496" id="CVE-2022-21496" type="cve" title="CVE-2022-21496"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="java-11-openjdk-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">02facf4eb7ed3c77b55d90ff88353ddfe61fb4fe18db5fff011a4f12029119fa</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-demo-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">21fb7b5578d2f17dfcf7b5dbf39b03fcc3a8e7aa7f1fcc10eff6acb5acf6e400</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">23ff3a17a069a3f0fc5f71f163f4feab8d3ec9cf5a6410c73bb3262913702269</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-headless-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">372fdb6f8668464e8e150ad327eae20ed8eaa9861e77afe61830ceffbd73a1e2</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">3c13ccdb678c9391b0e3af803c37b480ddb1aff12076202d41a1dc3d1dde3e78</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-devel-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">54bb0c9e9638facb27ed968d7bec87cc2630ee0c52f95ef4113702ae46aff8e0</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">6a4ffd8964f4c444e86b526ad6f413bab4c0bfa33df06decea22a7615e8f69a4</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">86f066be7576838637501382be3ac3e97d676a121ba87da707d5d098b8650d95</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">8c2c81e2c4bd3ecc324d216aa85accbaae33af0702e9eaa5dc52a85b9007b5ed</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">8e2fa50c7b6a7e95d307e4a7aa7e43a1d2700c46f09c215c3403168047f8c736</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">987e2d8c528f21dfe30ae877a1eb5e4809f98c565b211512f3380ddba8f4366e</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">a15441ec58b3feebef8205d234c8fc952f76e346505525c4ff2b6dfaaff2bbb2</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">a7818ae50f3d8273cde1b78a7c0b9626863cff4269cf17f2f70daf8952d381d6</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">a7f44bd6843bf70d903766fc0213f555e1a5c4e26206739dffcc97575f91648f</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">ac86602d56563be94c56ad4736bdfa49d27f0fac0510b9014ad7c396c841333f</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">b336c1dee6140147e9ba307a9f82ef9654899daa889b5992905700cfd2505752</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">b541fd432ef80fdc45b513bf99bfde69cdd3712cd14a251e3ed67407d1d0e5ba</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">c4091aa0d41dffee84cb733ff4e6132241165d47bf678d46e444e94770356c81</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">cba1c4937f00d49c4888ef954c17670a3774a28dd820fb14dbada747427b55bb</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-src-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">cdaea29681257123bc984c4250bb2e18b0a1b4df2b1716097ed599b2fc5fc869</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">e436e2c4b4ebc8d21f520f2b5e31d5dbd00813948c839cb7f0198f1b01f6bcbb</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">e84aa8915752218d83620cb33f2bb51a2807c81b36b037ce5fbdc8efbfa1ec49</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.15.0.9" release="2.el8_5" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.15.0.9-2.el8_5.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.15.0.9-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">f44b8c9ff21921cca0da0d5c5e721be5eaa85a65d839f259dbd50a8514df2bd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1445</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2022-04-20 12:21:21"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Important</severity>
    <summary>An update for java-17-openjdk is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: Improper ECDSA signature verification (Libraries, 8277233) (CVE-2022-21449)

* OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)

* OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)

* OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)

* OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)

* OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Enable the import of plain keys into the NSS Software Token while in FIPS mode [almalinux-8, openjdk-17] (BZ#2018189)

* Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode [almalinux-8, openjdk-17] (BZ#2055396)</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1445.html" id="ALSA-2022-1445" type="self" title="ALSA-2022-1445"/>
      <reference href="https://vulners.com/cve/CVE-2022-21426" id="CVE-2022-21426" type="cve" title="CVE-2022-21426"/>
      <reference href="https://vulners.com/cve/CVE-2022-21434" id="CVE-2022-21434" type="cve" title="CVE-2022-21434"/>
      <reference href="https://vulners.com/cve/CVE-2022-21443" id="CVE-2022-21443" type="cve" title="CVE-2022-21443"/>
      <reference href="https://vulners.com/cve/CVE-2022-21449" id="CVE-2022-21449" type="cve" title="CVE-2022-21449"/>
      <reference href="https://vulners.com/cve/CVE-2022-21476" id="CVE-2022-21476" type="cve" title="CVE-2022-21476"/>
      <reference href="https://vulners.com/cve/CVE-2022-21496" id="CVE-2022-21496" type="cve" title="CVE-2022-21496"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="java-17-openjdk-devel" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-devel-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">021f1ed59ca8c2d0369bce103d781d7e4290b0f7fb4fdc19374dea471fa4f45e</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">16354a0f3bb4be83acaa46be668485c3746b4d01ca22b5d76c6ce61a0c637ea7</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">17cacb5cf64e5724bd1d1410bf53e1b441eead8d322a9eb6216ef47b36d02a33</sum>
        </package>
        <package name="java-17-openjdk" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">2a88937ad641b697f862ca49d07278815f738953b8c4a0a147adf6e7edca6394</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">349ab95498acf9316cd2885b9e4a98157619d3b6e4590195d1d8cf1e7607d0e3</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">392a5da64de9adc7f653410cd7f3be6e2d8534e308c673f6e13d6dc0f1b04dbb</sum>
        </package>
        <package name="java-17-openjdk-jmods" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-jmods-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">39bc5997a7f7d357e72020cd5b7b42b79fa02dfd331c1e537278c7e8afc3a25a</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">3a3d144e88fbc7f91711f8d88b53cb79ea13fb98df1f799522d1818d3db620ee</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">413194d296996cb1c65377caf16b70c533fde9c67743604fb2d5c7c5e6b8e918</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">4aec0e7cdf59ab39c42f140a9fe9642d5862a336691b34ada139970a2e7bf5fb</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">4b3e44cc4024b98e83c5c12a17c2a3bf156fb33de1db6e560e9d884715abd4fc</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">4c9a201fd40190ca4739db16f6c3e1854f506585aa779dfe0eaba6b90e24ebd3</sum>
        </package>
        <package name="java-17-openjdk-demo" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-demo-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">821d9afce4ca089cf63f8d9fa6b2927b7e805cd565b288d860ac2dfcc1c58273</sum>
        </package>
        <package name="java-17-openjdk-static-libs" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-static-libs-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">8648d9f843fc4fd7dd5463857248cee96c7e3dcf7b5fbfd8f36be2a8a4312dd0</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">a532e1c9ef8538b29b7d85da16089b6156e7059bff3fffc0766bb48d93b95f25</sum>
        </package>
        <package name="java-17-openjdk-headless" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-headless-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">a9f99756f605d6b350091d3fe72edabe19ff78493d1d3bee5fd6cd93367475df</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">adb4557e4c44e73e82db5fd069c5b407cf47c0adb2cd65158f1946f363a9d400</sum>
        </package>
        <package name="java-17-openjdk-javadoc" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-javadoc-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">aef02e2e6ece3e01e702a6c8b4bcfdbfb511ffe0574b2a6a4eb25a284529ff45</sum>
        </package>
        <package name="java-17-openjdk-javadoc-zip" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-javadoc-zip-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">bce9d30c7f5e3c0e91880265bf7a4b052a0c757e1b45c81ed35a075cc9c897c0</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">bceeead75a304f696e6fb0029627143fa9ca995d8276d5119cc78f51e1fb0fe9</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">ccea84abc870cfcea92ba39dfff49fa45c5be1ef86c67ac670f45966f9ef631c</sum>
        </package>
        <package name="java-17-openjdk-src" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-src-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">cf2b395b5fa9446a91312ddd2a1051d4fbf7a17c1fd4f875795651b4900d8124</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.3.0.6" release="2.el8_5" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.3.0.6-2.el8_5.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.3.0.6-2.el8_5.aarch64.rpm</filename>
          <sum type="sha256">de0121424499d7b5c94976e9994886e80c5edc2ca6d69733a8bf3a9585f51fed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2022:1491</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2022-04-25 15:17:09"/>
    <updated date="2022-04-25 15:17:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-openjdk is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)

* OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)

* OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)

* OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)

* OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1491.html" id="ALSA-2022-1491" type="self" title="ALSA-2022-1491"/>
      <reference href="https://vulners.com/cve/CVE-2022-21426" id="CVE-2022-21426" type="cve" title="CVE-2022-21426"/>
      <reference href="https://vulners.com/cve/CVE-2022-21434" id="CVE-2022-21434" type="cve" title="CVE-2022-21434"/>
      <reference href="https://vulners.com/cve/CVE-2022-21443" id="CVE-2022-21443" type="cve" title="CVE-2022-21443"/>
      <reference href="https://vulners.com/cve/CVE-2022-21476" id="CVE-2022-21476" type="cve" title="CVE-2022-21476"/>
      <reference href="https://vulners.com/cve/CVE-2022-21496" id="CVE-2022-21496" type="cve" title="CVE-2022-21496"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">0b610911c4e76a24fa2ef0f937beb7f6f0354298812b91e8a2dab599852ef78b</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">0f7d1c2128c05574dc3983c964b30a2ee1cafa385854f64adaeec23cb9fdfbf0</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">1125f7b23380eaddab7b7a180639d6d8d4493462323fd7d9e62f007384016f34</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">189aa878e426d6a0ea82e337480a8573896b5ebc12588abc974fb51d974e8771</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">23b5269ec21fed5b209227b84294ac8c10caed7c9c6798cd2a906d2bbc45fcb5</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">3141202260c9367bfdfe6a5c6b5e6247f9a7d2deafb05c141e0c398b476d8a87</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">3a2ba47ea1d9864ab778488b46e91512ba65b95877343ac4f7cf5bf274b45a55</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">4380aa173979185eae355243791bf75a2b3f8510e544ac908c84cce9659f98b3</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">592a571807e62fc874f738b01ffc18be274720669480f6d5bde17aff4792065f</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.332.b09-1.el8_5.noarch.rpm</filename>
          <sum type="sha256">8441397cf8910ef0bb1620b630cb95023823fe46bfa57af0a884b634428bda2c</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">88f44a5064588a30f45ae50763fd470b4b0d59befc1dbbbc47f07b548e0218d9</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">abc4cbe803a7f8d956dcc8c81b8875e9485ab14012bd0e31f2710a978926596d</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">c1c6a81402210f7099a4309564965369bfb61a48315538dae1b99da7bf5adad7</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">c21c4a13fa528d5b378408f5b80782400b7865b4e216c4bff9bb31848f1b1535</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">c9d39d38a6a5dc0f3db9894af2b649be28d1d308044fd7671f3c3ec10da960b0</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.332.b09-1.el8_5.noarch.rpm</filename>
          <sum type="sha256">cf5bf19b7901ad8cbd7ca8521a732ac43f4d95bbecb9d42d7c2495fe409d60ef</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">d1215f9137d18e039867afe615efed5c80fcb89b28363c76cff42e17a2d706be</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">e344fc2cc861a8d12e2422c4a2890ef30f8dc4c3b5b7a9e9e82a6c9da5df6bf2</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">f7aad6eaf87699fc12f9daab2aef08a875a68849c4dcc9ad749f38655e2ddf80</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.332.b09" release="1.el8_5" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.332.b09-1.el8_5.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.332.b09-1.el8_5.aarch64.rpm</filename>
          <sum type="sha256">ffd558f94b3a8644f9f860d9cc05f8a310e5a569a952c4113b3052e871f0dcf4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="2">
    <id>ALSA-2022:1642</id>
    <title>Important: zlib security update</title>
    <issued date="2022-04-28 14:07:14"/>
    <updated date="2022-04-28 14:07:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Important</severity>
    <summary>An update for zlib is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1642.html" id="ALSA-2022-1642" type="self" title="ALSA-2022-1642"/>
      <reference href="https://vulners.com/cve/CVE-2018-25032" id="CVE-2018-25032" type="cve" title="CVE-2018-25032"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="zlib-devel" version="1.2.11" release="18.el8_5" epoch="0" arch="aarch64" src="zlib-1.2.11-18.el8_5.src.rpm">
          <filename>zlib-devel-1.2.11-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">41ada7ca1732a293511a1f3f9d7fc1b93a164ed2c23d899cb8852e5e68ad4396</sum>
        </package>
        <package name="zlib-static" version="1.2.11" release="18.el8_5" epoch="0" arch="aarch64" src="zlib-1.2.11-18.el8_5.src.rpm">
          <filename>zlib-static-1.2.11-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">42c5f64f38a55e52b6814005b79c0bb627e325c18471f0ca5367beca4eddec0c</sum>
        </package>
        <package name="zlib" version="1.2.11" release="18.el8_5" epoch="0" arch="aarch64" src="zlib-1.2.11-18.el8_5.src.rpm">
          <filename>zlib-1.2.11-18.el8_5.aarch64.rpm</filename>
          <sum type="sha256">941084214193631362faa6c5093c0ea00d94016c12e5a5375ea0c05cd2193d58</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1759</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2022-05-10 07:59:57"/>
    <updated date="2022-05-10 07:59:56"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>5</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the virt:rhel and virt-devel:rhel modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0), libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802, BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)

Security Fix(es):

* QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)

* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)

* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)

* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)

* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)

* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-2021-35268)

* ntfs-3g: Heap buffer overflow in ntfs_attr_setup_flag() triggered by a specially crafted NTFS attribute from MFT (CVE-2021-35269)

* ntfs-3g: NULL pointer dereference in ntfs_extent_inode_open() (CVE-2021-39251)

* ntfs-3g: Out-of-bounds read in ntfs_ie_lookup() (CVE-2021-39252)

* ntfs-3g: Out-of-bounds read in ntfs_runlists_merge_i() (CVE-2021-39253)

* ntfs-3g: Integer overflow in memmove() leading to heap buffer overflow in ntfs_attr_record_resize() (CVE-2021-39254)

* ntfs-3g: Out-of-bounds read ntfs_attr_find_in_attrdef() triggered by an invalid attribute (CVE-2021-39255)

* ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name() (CVE-2021-39256)

* ntfs-3g: Endless recursion from ntfs_attr_pwrite() triggered by an unallocated bitmap (CVE-2021-39257)

* ntfs-3g: Out-of-bounds reads in ntfs_attr_find() and ntfs_external_attr_find() (CVE-2021-39258)

* ntfs-3g: Out-of-bounds access in ntfs_inode_lookup_by_name() caused by an unsanitized attribute length (CVE-2021-39259)

* ntfs-3g: Out-of-bounds access in ntfs_inode_sync_standard_information() (CVE-2021-39260)

* ntfs-3g: Heap buffer overflow in ntfs_compressed_pwrite() (CVE-2021-39261)

* ntfs-3g: Out-of-bounds access in ntfs_decompress() (CVE-2021-39262)

* ntfs-3g: Heap buffer overflow in ntfs_get_attribute_value() caused by an unsanitized attribute (CVE-2021-39263)

* libnbd: nbdcopy: missing error handling may create corrupted destination image (CVE-2022-0485)

* hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622)

* nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS (CVE-2021-3716)

* libvirt: segmentation fault during VM shutdown can lead to vdsm hang (CVE-2021-3975)

* QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c (CVE-2021-4145)

* QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c (CVE-2021-4158)

* QEMU: block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1759.html" id="ALSA-2022-1759" type="self" title="ALSA-2022-1759"/>
      <reference href="https://vulners.com/cve/CVE-2021-20196" id="CVE-2021-20196" type="cve" title="CVE-2021-20196"/>
      <reference href="https://vulners.com/cve/CVE-2021-33285" id="CVE-2021-33285" type="cve" title="CVE-2021-33285"/>
      <reference href="https://vulners.com/cve/CVE-2021-33286" id="CVE-2021-33286" type="cve" title="CVE-2021-33286"/>
      <reference href="https://vulners.com/cve/CVE-2021-33287" id="CVE-2021-33287" type="cve" title="CVE-2021-33287"/>
      <reference href="https://vulners.com/cve/CVE-2021-33289" id="CVE-2021-33289" type="cve" title="CVE-2021-33289"/>
      <reference href="https://vulners.com/cve/CVE-2021-35266" id="CVE-2021-35266" type="cve" title="CVE-2021-35266"/>
      <reference href="https://vulners.com/cve/CVE-2021-35267" id="CVE-2021-35267" type="cve" title="CVE-2021-35267"/>
      <reference href="https://vulners.com/cve/CVE-2021-35268" id="CVE-2021-35268" type="cve" title="CVE-2021-35268"/>
      <reference href="https://vulners.com/cve/CVE-2021-35269" id="CVE-2021-35269" type="cve" title="CVE-2021-35269"/>
      <reference href="https://vulners.com/cve/CVE-2021-3622" id="CVE-2021-3622" type="cve" title="CVE-2021-3622"/>
      <reference href="https://vulners.com/cve/CVE-2021-3716" id="CVE-2021-3716" type="cve" title="CVE-2021-3716"/>
      <reference href="https://vulners.com/cve/CVE-2021-3748" id="CVE-2021-3748" type="cve" title="CVE-2021-3748"/>
      <reference href="https://vulners.com/cve/CVE-2021-39251" id="CVE-2021-39251" type="cve" title="CVE-2021-39251"/>
      <reference href="https://vulners.com/cve/CVE-2021-39252" id="CVE-2021-39252" type="cve" title="CVE-2021-39252"/>
      <reference href="https://vulners.com/cve/CVE-2021-39253" id="CVE-2021-39253" type="cve" title="CVE-2021-39253"/>
      <reference href="https://vulners.com/cve/CVE-2021-39254" id="CVE-2021-39254" type="cve" title="CVE-2021-39254"/>
      <reference href="https://vulners.com/cve/CVE-2021-39255" id="CVE-2021-39255" type="cve" title="CVE-2021-39255"/>
      <reference href="https://vulners.com/cve/CVE-2021-39256" id="CVE-2021-39256" type="cve" title="CVE-2021-39256"/>
      <reference href="https://vulners.com/cve/CVE-2021-39257" id="CVE-2021-39257" type="cve" title="CVE-2021-39257"/>
      <reference href="https://vulners.com/cve/CVE-2021-39258" id="CVE-2021-39258" type="cve" title="CVE-2021-39258"/>
      <reference href="https://vulners.com/cve/CVE-2021-39259" id="CVE-2021-39259" type="cve" title="CVE-2021-39259"/>
      <reference href="https://vulners.com/cve/CVE-2021-39260" id="CVE-2021-39260" type="cve" title="CVE-2021-39260"/>
      <reference href="https://vulners.com/cve/CVE-2021-39261" id="CVE-2021-39261" type="cve" title="CVE-2021-39261"/>
      <reference href="https://vulners.com/cve/CVE-2021-39262" id="CVE-2021-39262" type="cve" title="CVE-2021-39262"/>
      <reference href="https://vulners.com/cve/CVE-2021-39263" id="CVE-2021-39263" type="cve" title="CVE-2021-39263"/>
      <reference href="https://vulners.com/cve/CVE-2021-3975" id="CVE-2021-3975" type="cve" title="CVE-2021-3975"/>
      <reference href="https://vulners.com/cve/CVE-2021-4145" id="CVE-2021-4145" type="cve" title="CVE-2021-4145"/>
      <reference href="https://vulners.com/cve/CVE-2021-4158" id="CVE-2021-4158" type="cve" title="CVE-2021-4158"/>
      <reference href="https://vulners.com/cve/CVE-2022-0485" id="CVE-2022-0485" type="cve" title="CVE-2022-0485"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_virt-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_virt-devel</name>
        <module name="virt-devel" stream="rhel" version="8060020220510122810" context="9edba152" arch="aarch64"/>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">00a22c8f77937c6269e3a4b7d85be298f931a842b63882c821c26954143f9917</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">01b36ce1d6735050e249d32375b16c623ed36bff82e75e8984115a2c89fa1f3b</sum>
        </package>
        <package name="libnbd-bash-completion" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libnbd-bash-completion-1.6.0-5.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">04261c29bb296eb9a75529ccf38f2cf0059e4537d8911980c2993cd607ac46fa</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">0462872e1d87034335e6d11a6e3a48cf0d3f04e763db0674189145bd2e8b1132</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">090f8533c6ee1d816f1f722738200b56ed657ce8d6d72e2a2580c5454848a5e8</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">0bcaf5d8e5f17815e1295651458c4f429ff9fccadbfe7b2f3c23b784efee47c1</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">0dcb033001fc7db02067c6135e91471719944f535bc85528dd1dfb05715c30bb</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">17c52283878044dd6fe5929028e7acf1334150b5bd429dea2edcb4533a19b451</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-libs-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">17d165a114df6d9c87f5474a8ef4a6cc8989be6fd6448cb5a7f478b5060f9474</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-wireshark-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">1aa32d663ef065bafec0e1512511f1032d51e77c24d109162fe4f7a54fc7c849</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">1c3d96f0d76448fe8d48ce5f38736041d1de76b418f3096443e4c763f4aea2a4</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">1d38905a874bcc69a182c689ccb07febbd3da0ab4a0ec210e4aacf155191cf90</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-python-8.0.0-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>python3-libvirt-8.0.0-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">201b8b06252415e23158f084ce1623580a2a422e79e7fd7c6700037ff7bb460f</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">21cebb98e57d6cacdc14b92b430b0c8b2aecd95b032bb9a8aba00e6153066f2a</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-client-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">23d52ebcf090b583623aaa3dcf02a5d7ccb7a0d048b064a0efd0ccc69898ed30</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">28cd4f60c0b0c6a80e2c0565c2be934d689668531b9561e31b623e3dc40f5c79</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">2d9e77c5bc226a472ee5b46e85174a22b1f3959cfc7aa3112df00b1fce115947</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">2e82e621a929ddb9505f2ddeaa3a637bea09652553179ad0c318cbb0f897c2a5</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">3233b84340378bd9995f4ebb93772164fa6bf22b09e16c91675a2cefc5e36096</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.6" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libguestfs-winsupport-8.6-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libguestfs-winsupport-8.6-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">3451d898dcef6fd8eba7084a2cb9a46e4e5dc7ae6ebf087bd3fd43f5409cb370</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">376f48832703d3e8db6d8bc8ccd0fbe42d122a8f34f5721796a3ec7ee80e530f</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">37916087ec0b79b843c0b0ed6e94824c91444feb5caba41905a0a63d0b1ff384</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">392cbcdcad2246af1833e7e11e75403e58a0de12af22d0242fa5cf401377610e</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">40b82b2ed38af4d46da4de59be160307caba980b53dbe4a58c96d6da3c424421</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">43467f785e992de1d227273df714d041d523ecb9096697a0cbe50ddca24403ee</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">475718b68490ef173aef57f3aa680f5862a6799ade88eacbaf51738aed5af001</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">4797cbeabad4a6e34bfc69a30b52b8267cf89373964f6751c7e51e6fef8446ce</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">48ba556391893b813b8b00ca6850c883070f0d01e9ebf7ff480af5510d35adcb</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">4920f1651385ebc8a54bbb1f0b22f12e5f18dbfa2604d8aef87c885126cb2725</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">49b9715349f358cca7706cf7272a54e49466e7cca487afceb1eecb61e576f7f3</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">4bf299e6e0e6ad536b963747c4f9f255a4978cad6ae6b7fb95576cb36fd83ad7</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">4ead3bc94dc0c1de071a7930418736ac0e48a4137a0af7b2a31c0d4dd7a12b0d</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-libs-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">529a2c12f180f0b24092ce44753df418cf6a0bc4357dd17336da7c86b4d51671</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">5414e8767303cf3da31c99da97e72f7a408b8d835b95b6e2c44d394064bcdf57</sum>
        </package>
        <package name="SLOF" version="20210217" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="SLOF-20210217-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>SLOF-20210217-1.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">566330deb9430a272cc9e194f24bdd9a491f9ee223e54a2f9577b4e1d72092c9</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="supermin-5.2.1-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>supermin-devel-5.2.1-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">56ae47acbc529be1914868d608a30a4d451786bc44331b18260c887336cbc55f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">578d9461987c1b47912eb26cf7ae1925abf6f58034bfaeabdddae9c2c9a7a436</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">59f09ce22cdff8b0df7e8b973a1d3053302d312078c3a8a9a117b00a79c0afc1</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">5ccf38495ab41685739093d792b7d361f92c2a843d8296a0900e0e25a63499c2</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-nss-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">60c4bd3afc524981486161fdb3fbd26166996d3e9777d06cbbf3008e44532ad6</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">622166df6272f067ff22fb348eae9e5c6b899d029f6fb40d2b259456d70110d8</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">6242158c009720f0291eb7b197d0d035ef4aabf6909e3b12ac96e7591e287f0f</sum>
        </package>
        <package name="sgabios-bin" version="0.20170427git" release="3.module_el8.6.0+2880+7d9e3703" epoch="1" arch="noarch" src="sgabios-0.20170427git-3.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>sgabios-bin-0.20170427git-3.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">62a8a51a41f340146cc418ee91d9f48909327024150c0976e94a9cd537b2227f</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-4.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">66d9a4677289c743b2c2368344e57c3ba6971355281e1c73591ce0d9d7d579c4</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-core-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">66feaf3047c19dc35bf0dfd5781b1bcf1d6525359e7bef86232ff3a31e548df5</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-guest-agent-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">68e3227081c461b38605a7decb711068577cc96b62eb44325114ad47c7e06d29</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libtpms-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libtpms-devel-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">69553b5ccdf7b75c3296aa0ed6a0907431fe5f3fbf9ed6998123ac51986505df</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">69f07efe0d94673e9cf77b5fced6d5d0125baddc18e8ee37c9d97fe547ee81d5</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">6decf4eeefa3962492aa70c47e2a31ad9204916d3467ee975025d8cb1e108025</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">6f240411b8eebc0411ab84fb52f7fffad23c4ef27b4201067167415ac4cfc9ae</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">70af0b572d8ba85daa1f61fc261d7860ae8eccfa9d5667e3bbb786f761061990</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">71c6b8f5da4fcc04e203b8eaa0aa900eb7d75ccd68cb61abcad100f20148cdb8</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-img-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">749ada501e455151d3b848cf1166c773b77e27ca786d0fe7653302de4d1a73e9</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">789be34f81846b92e83207a3f638f563729b45476bf40581d25c92aba55c41e5</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-dbus-1.3.0-2.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7bd28a649f56f3823e2cf3f6ac920ba389e4eaba1adad666059332b3564421ef</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7bfa0f914c22d17a9ecf18b7629c980fdcf79e261942a2d003a815fde6c5d036</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-devel-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7df178225415143ca9ad6d6ca6f2950024c3958d4bf7f3609497a9b3933183ec</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-docs-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7e18f4aaff63e664d5d6172bffc30b79a0289ed2d0606d026dcbed902db59297</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">80cc8041828d0961d5a627d4645a6de764b5b79d4cf95c6bd547230b8c0104c3</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">8143dbe16e23d80fa50b9bea67640cb7e7733faebc015d7435a8824107116fd7</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">8249e79e9962e7b43ccbfd0650b590fabdec824319c3fa286582f35bf44b384d</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">8472f09cd3c58178a2f709440560f0dafe65d9c881cab64570fc9685a40d53ea</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">857cb308021549069b2393993c88f727c00866bca9f68527d81f269e53e38cda</sum>
        </package>
        <package name="seavgabios-bin" version="1.15.0" release="2.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="seabios-1.15.0-2.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>seavgabios-bin-1.15.0-2.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">86f6a0786771a35c1924490497000089bffec65655053c2e6994d4555adb7a9b</sum>
        </package>
        <package name="virt-v2v-man-pages-uk" version="1.42.0" release="18.module_el8.6.0+2880+7d9e3703" epoch="1" arch="noarch" src="virt-v2v-1.42.0-18.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>virt-v2v-man-pages-uk-1.42.0-18.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">87235b3d0345f2dddd4396219ea156b1aa4998e9d65547af9bdcd111ff8aaac3</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">8cc48315c47b39a89b32e4bfa2737ff23ba8d8805c5b31c65766590ee0f46ef3</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">9637f2618d591f47fc9e9acc51bd021466e3b0fb71d2e0b8157f0908d92be203</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">982eb434870d6d7396d6b4d091f87397f844af415820365956777d83ba25c372</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">9b27b33216ccbe91fcb1f058087cd03c702637ad2fbd9931ec9a250765f70dea</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">9e9a8988587603186e95cac997834f8cca157a712ac377054df0be3e1d4d0e28</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-common-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">9f28e0ac3022cb9e88b5438dde71310d18fd19a20132b0382dd3fc65d40597d4</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">a54b75d4a322deed28dad5597ea17a1cd310f64248e8fad03703e64657f734ef</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">a6439023efad8fcd87d90a109a2105da91fa2befc6e063de6898e17e263c0086</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">a6c45e808817e34a3102af24aaf79bf22e72e8851d62049b51fa664960f882a1</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">a6c683af91f3fc4daf701dbc6e5848b224c7cf1a8ca79b9666f926b43824309c</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">aa4ddf219d3ed8183f9e206779c7673dc7bcffbfa0554e3e9d732578409e3435</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">aac2c41ba8b5b6683da70746c8faa854f27b894d3c67e999a65e623a9a7c986f</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">ac74890816673ecfe965f37822e88d05d47bc1148a2c6319ecd528015344a25f</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">af20f58dfdfe3a5e66a195262a29437f6f80452d56873a438e76c521414177d1</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-devel-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">aff80d4fdd5cdc3234cfd6a8e9dd47e4744ccef259260dc8189de69c2e7be69a</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">b09bf9016c244fccf38ac373c725e20e0c6e676f1f2f062c914b05c1e9674aa9</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b0f38b9f3cd0595d9c84ecb5cd23a1bc9f8d55616e54fd7b98f49db93584c13b</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b16cb0191955c3f8149e18c2697ea9b4492db83535cd47ffded9fa19e65fba6f</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b27988464dce96b01b60d4e634d9093d906fd271393a35254980bc81f1b93a62</sum>
        </package>
        <package name="virt-v2v-man-pages-ja" version="1.42.0" release="18.module_el8.6.0+2880+7d9e3703" epoch="1" arch="noarch" src="virt-v2v-1.42.0-18.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>virt-v2v-man-pages-ja-1.42.0-18.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">b4c8ba90918e94c8b87c1e06af0dd48a186ebb2fb0d38fd0f2d9c4b82e5c2931</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b77131359eac62cb1ed91e7f4e5a1240f20ed83cebfb2aaf64f1cb9f40648ab2</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b94dbcf9abf28d020816edcf78b874b8a4fb7cce37a822457f4d9fe4efdc33bf</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>virt-dib-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">b967db9489ae1f848508850f23d5083c4890fe0a01b9a7181af2009acbdeb6e7</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-tools-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bce4f360f69f729855d4a6e19e1742bba80b61c781584818adba5b873899b496</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">c3db920ca84f7adea7d71c8b7a3d1c23dc93de7e0527f8d543d2cc871091d6a9</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">c4d2e77fabf688ca2816c8d8eed9f3aea92a6f686a85f13184e3224c97d9bc54</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libtpms-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libtpms-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cb380fab5dd9c4fdb8e53ab14bc02575e1c53ab4f644e3fbae25643f9e57e82b</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">cb3d6fe4c986cb49a8876cbe4d1614cd35f9a22b5c6f07c9f85e4837f3011d60</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">cc9f99845e8844803e18293558345d981bf9ae250c6a37abe38963cfbf89b6d8</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d0c6573cd68feda3b83b05186417ca32eae582b2d8fd1e3ee14afa7a61d7682c</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d1113d451ca409d7133eed06db426f84acc960dd3f2e4588aedee48105c99e83</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">d121e460d041f115bb8c0d5ff148ffd0402a800717aa1530bbc987216bd3b40a</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d18ab16cc866c53f14c849490e87810db98978a3e2e8730e10af0e45c88f3eeb</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d33ecb889834fd50c82ff338660b0dfeac071e9ad1605ee1c95578afbc44c162</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d9bb15759f890771331c1288c5562a12e10e7c4089eded1041b83da66bf948f2</sum>
        </package>
        <package name="seabios-bin" version="1.15.0" release="2.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="seabios-1.15.0-2.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>seabios-bin-1.15.0-2.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">da8e1a9c53240df93cae4e3cfa4cbd35b8a1751a77c05c0a2afb76937db51681</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">dbbd8330d76f3d9d4375299c1b57cb86fe6e9b9f6578073beb0216d714884bf4</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">df12b1bbd83fd5adfff09211ea68f921fececec07b92adc28f267038e1dc178e</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">e0289f6636915b5f0c3d3d2bc9354aa9bd4655a36ce68596f9e6f2122fb0ae7d</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">e03c8f7de90b9ddd422c66c2794d9df69670304a2bbc8abc2514c7a6ea4f7333</sum>
        </package>
        <package name="virt-v2v-bash-completion" version="1.42.0" release="18.module_el8.6.0+2880+7d9e3703" epoch="1" arch="noarch" src="virt-v2v-1.42.0-18.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>virt-v2v-bash-completion-1.42.0-18.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">e0db7510c73736558891cb99120852095040d3771c8d17b2372afc64befbe0c5</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-devel-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">e187939de1289b8590381ba36bf897441cdb504137fca4ed365623d8a0036137</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">e59bd700c1e1496b10e6336891d239fd191072279e9682297cd9e0446c9d655e</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">e6aabc36bca82477806e4d9cca5d92d6951021e58146a289170083bd53156e4b</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">e7dff27e2112a51df357d77b96b263092d89677fbf5155270cb0a5a07b34a3b9</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">efe08eb0ae51892b7bb8226d4f276c5565c4f3ec853ee1604f5b6927959c5e18</sum>
        </package>
        <package name="supermin" version="5.2.1" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="supermin-5.2.1-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>supermin-5.2.1-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f10363a3760a238e8b068825bd41199ecf5f09e9ad66b017438872c7054c0b89</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f767d0372dc97eed0ad2bbbbb937776a997ec91e7c97017bc4209a8497cf0fee</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f7772d478351f5bfc0421cc6fa02eb1d4f552a9723fad5327390b33a6d511477</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f7c90fe5a8372a07b7834abbe7749cbc237ccf1189507137a82430e1731bbafc</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="11.module_el8.6.0+2880+7d9e3703" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-11.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f8f17414afa8e3b32f7ff876751c150205f85f5bb664ad9c41a16cc3cc6a8d47</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-8.0.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f8fda2f855370dcdf763ed19632b726b46863b1e449897a4b6f08cdda4405fee</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-server-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">fc2d247327593075e2cc7ec8aa0cc0d2766c160118cb217465e4a27374cdf73c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1763</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2022-05-10 08:00:02"/>
    <updated date="2022-05-10 08:00:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the python39:3.9 and python39-devel:3.9 modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1763.html" id="ALSA-2022-1763" type="self" title="ALSA-2022-1763"/>
      <reference href="https://vulners.com/cve/CVE-2021-43818" id="CVE-2021-43818" type="cve" title="CVE-2021-43818"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python39-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python39-devel</name>
        <module name="python39-devel" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-numpy-f2py" version="1.19.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-numpy-f2py-1.19.4-3.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">028735173d71e16034adf25fdd86012f0e2d2f58ed2186036ba532b12392d8f0</sum>
        </package>
        <package name="python39-chardet" version="3.0.4" release="19.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-chardet-3.0.4-19.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-chardet-3.0.4-19.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">05646c9640a93f0cae3cf9dea2954dabd7e29f8fc9afbfd6b560e4a98004b5d9</sum>
        </package>
        <package name="python39-urllib3" version="1.25.10" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-urllib3-1.25.10-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-urllib3-1.25.10-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">06aabd763910bfdb55f7b8f0325a9d8859a67a50d845f39fadc9096890dbf496</sum>
        </package>
        <package name="python39-mod_wsgi" version="4.7.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="mod_wsgi-4.7.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-mod_wsgi-4.7.1-4.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">18dbc2c620fd7c15d5134a7b1f17d869ff4589a42586f37a4ea2387e8bf8b677</sum>
        </package>
        <package name="python39-devel" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-devel-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">1be216cbf047c784633856f7801a7f38d8941b7506d06d845fb31e9838083d47</sum>
        </package>
        <package name="python39-psycopg2-tests" version="2.8.6" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psycopg2-tests-2.8.6-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">29c92aa7decb87f06c5a6c7709f0e28765e669ead3b2a969a2244f1d51279f9b</sum>
        </package>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pycparser" version="2.20" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pycparser-2.20-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pycparser-2.20-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">36951a3338286403ce0e088c1f19852632705e7dceef5571e5464b5c61208974</sum>
        </package>
        <package name="python39-pysocks" version="1.7.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pysocks-1.7.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pysocks-1.7.1-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">36d0f271b88893241f5dbd4c7bb8fb6c825a18aed3b1d77d8877e483dcaf9d61</sum>
        </package>
        <package name="python39-cryptography" version="3.3.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-cryptography-3.3.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-cryptography-3.3.1-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">38c23593dc3854fa23e60dc3afdaca7c3b26d52c5eeae1a82b42a2ef7bcd2ffc</sum>
        </package>
        <package name="python39-pip" version="20.2.4" release="7.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pip-20.2.4-7.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pip-20.2.4-7.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">3ed5a6d2465a1422e386e6229394c3844ffb507a2cb70bf0961113e1ec210e19</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-psutil" version="5.8.0" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psutil-5.8.0-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psutil-5.8.0-4.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">69c388dbbaf69e6b3cd4f75de40ff58dcb926624f4427815e0da758ae15e650f</sum>
        </package>
        <package name="python39-requests" version="2.25.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-requests-2.25.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-requests-2.25.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">70fefcaf18f9672157a32e4b921fdeb3ddddcf08aff788bfe9f3d94b1af167a6</sum>
        </package>
        <package name="python39-rpm-macros" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-rpm-macros-3.9.7-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">7a0856f62a93f214202eb317790f779d3aebf83c8bad45466e1b009a8035cdd4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-psycopg2" version="2.8.6" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7e3f10153a12cb968fc339affa9729e2fccbc6c95a764a5c230e93cb6af85860</sum>
        </package>
        <package name="python39-idna" version="2.10" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-idna-2.10-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-idna-2.10-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b2cb5e6fb4ad66c6e6913569625783736fb84e6361b4e1a6ca777039dedd11f</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-tkinter" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-tkinter-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">a41d548a8c0546f6d7eda9009d2ef39e9074d8ea3c7b9c5cf016a58cf5cd3b1f</sum>
        </package>
        <package name="python39-numpy-doc" version="1.19.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-numpy-doc-1.19.4-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">a536afb6c681d3c12afcc479fe84dada68372d9502bbc9396fdd296620a6a648</sum>
        </package>
        <package name="python39-debug" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-debug-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">aaa36aa64c374e00e8f7bb3cb7ca045bca8a9ccd6a03b98eaef97cf28ca9347e</sum>
        </package>
        <package name="python39-psycopg2-doc" version="2.8.6" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-psycopg2-2.8.6-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-psycopg2-doc-2.8.6-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">ab4808b3ac95ebf5afceadacfa3f59a4cc3e41426026e47e0bd9e1e4cb31c319</sum>
        </package>
        <package name="python39-wheel" version="0.35.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="1" arch="noarch" src="python-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">aeba35b86a5db0f9131e0e258b2d5882206fc640b56bdf7beb9497191b8941ed</sum>
        </package>
        <package name="python39-idle" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-idle-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">afe5659b1fe13d5471a4c6c666c7b31a1ec5a05dceb97b9eb4f2ffbce98f32f8</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-test" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-test-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">baa42c45bd1652d8406def0425e508f399ad81b27ab053b0e82d825e78435f12</sum>
        </package>
        <package name="python39-toml" version="0.10.1" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-toml-0.10.1-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-toml-0.10.1-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">bd68deb2acd20331dd71a07c97a2fec809ec50d67d832edb6d90346ae441ca9a</sum>
        </package>
        <package name="python39-pyyaml" version="5.4.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="PyYAML-5.4.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyyaml-5.4.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">bd69cec4b5d32072ab1ad36b845af4e82a9e505bdee9d7d2d70a8409234ba3ad</sum>
        </package>
        <package name="python39-six" version="1.15.0" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-six-1.15.0-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-six-1.15.0-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">c0cabab4e96d5743180aaea757f23055acc7a325f00a856c7d685c250ce68b5e</sum>
        </package>
        <package name="python39-wheel-wheel" version="0.35.1" release="4.module_el8.6.0+2780+a40f65e1" epoch="1" arch="noarch" src="python-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wheel-wheel-0.35.1-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">c3c6df124b0b18855dc4e5d6afc893e3112a98615f540bd7b651f8e7988ba8b2</sum>
        </package>
        <package name="python39-setuptools" version="50.3.2" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-setuptools-50.3.2-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d5b7ac46f04cfefe6d865feb17b059588ebde0ace6783edfce048c3d7a3577ae</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-lxml" version="4.6.5" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-lxml-4.6.5-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-lxml-4.6.5-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">d88c69d4f50cbf2c292b64a91ccdc30899e800f1745a6b5ced74bf00cc846b09</sum>
        </package>
        <package name="python39-setuptools-wheel" version="50.3.2" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-setuptools-50.3.2-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-setuptools-wheel-50.3.2-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d9096bc24ef73fb8f6afaf3a85b96011b2be8b3ef4c1d463faa2c10d5c7f0d6d</sum>
        </package>
        <package name="python39-scipy" version="1.5.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="scipy-1.5.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-scipy-1.5.4-3.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">d911ca27ba07fb999320bc25d65d6106a2a5618c0f1c9e191bf94d9ddaa40b2e</sum>
        </package>
        <package name="python39-cffi" version="1.14.3" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python-cffi-1.14.3-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-cffi-1.14.3-2.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">daa35574cf0d12b84d723900240dd019028501344df9ebc34279ee8eba2ba516</sum>
        </package>
        <package name="python39" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">df6eabb39b0cf5bdc3054f4ce44ebdcf596afa9dcabaea997ce6085010932b74</sum>
        </package>
        <package name="python39-ply" version="3.11" release="10.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-ply-3.11-10.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-ply-3.11-10.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">e134e4d0a7d44ab24b28a9e5de2d8c186f5596c5f0c588bea2770d3225acf63c</sum>
        </package>
        <package name="python39-numpy" version="1.19.4" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-numpy-1.19.4-3.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">e825258ae08adade3db36bc28b97d98147c2c585127e678f52727e8b8939afa6</sum>
        </package>
        <package name="python39-libs" version="3.9.7" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="python39-3.9.7-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-libs-3.9.7-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">e8bec1d29cf2382ad2d28ede72c6db784a8845d1a95848d48193aff4dfea46c4</sum>
        </package>
        <package name="python39-pip-wheel" version="20.2.4" release="7.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pip-20.2.4-7.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pip-wheel-20.2.4-7.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f6dad57d8de28e53a42a58b9dc79dd72954301107d30617be419a4c9ebc70d33</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-PyMySQL" version="0.10.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-PyMySQL-0.10.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f81237c27d6ab23aae04cf6251a21605834a254438d5d936e4d68567d13579e7</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="4">
    <id>ALSA-2022:1764</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2022-05-10 06:23:23"/>
    <updated date="2022-05-10 08:00:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for the python38:3.8 and python38-devel:3.8 modules is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

The following packages have been upgraded to a later upstream version: python38 (3.8), python38-devel (3.8). (BZ#1997680, BZ#1997860)

Security Fix(es):

* python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)

* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)

* python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)

* python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1764.html" id="ALSA-2022-1764" type="self" title="ALSA-2022-1764"/>
      <reference href="https://vulners.com/cve/CVE-2021-3733" id="CVE-2021-3733" type="cve" title="CVE-2021-3733"/>
      <reference href="https://vulners.com/cve/CVE-2021-3737" id="CVE-2021-3737" type="cve" title="CVE-2021-3737"/>
      <reference href="https://vulners.com/cve/CVE-2021-43818" id="CVE-2021-43818" type="cve" title="CVE-2021-43818"/>
      <reference href="https://vulners.com/cve/CVE-2022-0391" id="CVE-2022-0391" type="cve" title="CVE-2022-0391"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_1_python38-devel</name>
        <module name="python38-devel" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-asn1crypto" version="1.2.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-asn1crypto-1.2.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-asn1crypto-1.2.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">02dd00e439241ec1b0a1151948e9445a82f9eecf9740cd9e21f365ddd0dce291</sum>
        </package>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-idle" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-idle-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">1432de83f95856462369e06c64b361c7fd592af4fb6a0b98ec59aba5eefe9f63</sum>
        </package>
        <package name="python38-urllib3" version="1.25.7" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-urllib3-1.25.7-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-urllib3-1.25.7-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">1c854cd02b9b9f3312264296a6fbb6911ba465792d64fd2cbf97a5a01a253d26</sum>
        </package>
        <package name="python38-pycparser" version="2.19" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pycparser-2.19-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pycparser-2.19-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">323e4624b4a15564a85ebcbfd841409d1642e4623ee4ec2d3aed59bc7e1ab829</sum>
        </package>
        <package name="python38-markupsafe" version="1.1.1" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-markupsafe-1.1.1-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-markupsafe-1.1.1-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">3f488db760321468941121cb12ad0fc0e9475b3622136942dcd630cffd24e58b</sum>
        </package>
        <package name="python38-chardet" version="3.0.4" release="19.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-chardet-3.0.4-19.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-chardet-3.0.4-19.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">3fa07e33c9abbda7289a9afec9ed4b0923a21b740c5011f4111055590466435a</sum>
        </package>
        <package name="python38-wheel-wheel" version="0.33.6" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wheel-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">3fe0327ebce820b6d26c55b284ec7cabcd5d27d70ee5a310db62c6cee6680e86</sum>
        </package>
        <package name="python38-libs" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-libs-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">46d679439ef44eff3408930e40c3ec55a12c885a2a73cee53128f5ff1f2e29d7</sum>
        </package>
        <package name="python38-pip-wheel" version="19.3.1" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pip-19.3.1-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pip-wheel-19.3.1-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">4a2f58d50c69a83582aeb5bdedb52ab98ccf34b1693b4b4358ceef3ee0b51c8a</sum>
        </package>
        <package name="python38-pyyaml" version="5.4.1" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="PyYAML-5.4.1-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyyaml-5.4.1-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">4f076f8068434440b2f5d4e3d4f77d1f4b6207626d2f23a04c6a01522ff23ac5</sum>
        </package>
        <package name="python38-six" version="1.12.0" release="10.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-six-1.12.0-10.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-six-1.12.0-10.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">64fccef78c9117d67f1dd91023f2e52a5dea26b59b342b4ab5244642d3fb443d</sum>
        </package>
        <package name="python38-psutil" version="5.6.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psutil-5.6.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psutil-5.6.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">6f9de9137566a128895b2ab39744217451977a1afd34d187cb54bf607946f459</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-numpy-f2py" version="1.17.3" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-numpy-f2py-1.17.3-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">6fc01ad69ab3ae9c60dad8a7e22220072cbd24c5495cd0158e8d22c7e3471dfc</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-rpm-macros" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-rpm-macros-3.8.12-1.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">72f7b22cac569c8df883d822457945f5d4897db99cec17cb016ed07a99abff62</sum>
        </package>
        <package name="python38-pip" version="19.3.1" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pip-19.3.1-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pip-19.3.1-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">77809f0e7c6817f3754e50443534bcec4fba5cf7344996782a7fcd65de3cdded</sum>
        </package>
        <package name="python38-scipy" version="1.3.1" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="scipy-1.3.1-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-scipy-1.3.1-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">7a8f643660f230b6d5a8d0f3292141748a5c38bc3030e618f6f103c63af0f44f</sum>
        </package>
        <package name="python38-test" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-test-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">7e33e7e00730775fa9887bbec8e18e1c4b009107ea984178c18f48a25124199f</sum>
        </package>
        <package name="python38-devel" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-devel-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">81c2e4b3a3a415d5aac16819798ddc5b69c5c48a28e1d9a3cb6ca889c442a457</sum>
        </package>
        <package name="python38-babel" version="2.7.0" release="11.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="babel-2.7.0-11.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-babel-2.7.0-11.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">83c708a32e8f1f3384ef61a65e81536ba1a3dd654c7db21ca2e6fb33f6fe5277</sum>
        </package>
        <package name="python38" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">95e4d6339c7a309fec8fc9a791c85136bf725a6362e42a81c6b73255d1b4f6b6</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-Cython" version="0.29.14" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="Cython-0.29.14-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-Cython-0.29.14-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">a4e1d3d54e2a12f52aab2227978ee9e0a7af759c5d2e2564214321c648ef9ae5</sum>
        </package>
        <package name="python38-debug" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-debug-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">aa18d0502470ce343d642f533eb4f4e2852e49d814939a1467e663030e693aa6</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-psycopg2" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b2e43444b2dabaa46628615d6263e07945d5eb190e4af36952cfb19c511d4864</sum>
        </package>
        <package name="python38-mod_wsgi" version="4.6.8" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="mod_wsgi-4.6.8-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-mod_wsgi-4.6.8-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b323ee37330a883fc856e013571f5135df2fb8713757dd2590096cde7bd6614f</sum>
        </package>
        <package name="python38-cffi" version="1.13.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-cffi-1.13.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-cffi-1.13.2-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">b40a44d392b221398be147937cdf5987d0f3d4e8bfec2e1e3a55271aafe281d8</sum>
        </package>
        <package name="python38-wheel" version="0.33.6" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wheel-0.33.6-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bc0227adb0fc8a67582fa1e63bc325475c24d3079f987c24985c7e1c60e2683b</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-jinja2" version="2.10.3" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-jinja2-2.10.3-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-jinja2-2.10.3-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bec5246952e7c06cdf9668cddbaf25ef126455e0c23c58709f2390b31a4e26ed</sum>
        </package>
        <package name="python38-cryptography" version="2.8" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-cryptography-2.8-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-cryptography-2.8-3.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">bf72b57867e7b5e38597ff7d7cd4c14a8f5917cabef72b72aa927ddf62cd84f6</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-psycopg2-doc" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-doc-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">c4a25a77c5201ef4da0194f13891bae13417ab45a23def0e8b7e9cbd09966f7a</sum>
        </package>
        <package name="python38-lxml" version="4.4.1" release="7.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-lxml-4.4.1-7.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-lxml-4.4.1-7.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">c82b9b77c7f694c4f66b17dbbe0116b6cb939f9419bab751db9295a4c1a13d45</sum>
        </package>
        <package name="python38-ply" version="3.11" release="10.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-ply-3.11-10.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-ply-3.11-10.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c9e329fc07bf0783b7fe9856872d89b8585935f0b0796d9644bd9180e856ee0e</sum>
        </package>
        <package name="python38-tkinter" version="3.8.12" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python38-3.8.12-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-tkinter-3.8.12-1.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">ce2b7868bd5a041ef33ffd31ed62ad65c34a5a0278492351ed165b284f64f347</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-PyMySQL" version="0.10.1" release="1.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-PyMySQL-0.10.1-1.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-PyMySQL-0.10.1-1.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ea7ab6e644af54dd1c7b612565016c4fbc5a3971de5086cf83c96544fb234007</sum>
        </package>
        <package name="python38-psycopg2-tests" version="2.8.4" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="python-psycopg2-2.8.4-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-psycopg2-tests-2.8.4-4.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">eba86f1d719f3bf1b524322a7ef1f22f20a539a644c465831f8e3e102a5176bb</sum>
        </package>
        <package name="python38-numpy-doc" version="1.17.3" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-numpy-doc-1.17.3-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ed0bf353f1c8dde52a1ca4878bfeecc59da8efe63cdd1d8169f19be49d7f3e10</sum>
        </package>
        <package name="python38-setuptools-wheel" version="41.6.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-setuptools-41.6.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-setuptools-wheel-41.6.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ed63488c6203e053f99e3bdf9b49d2af17d3f4ca0f9d1462e6cca591f123e806</sum>
        </package>
        <package name="python38-requests" version="2.22.0" release="9.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-requests-2.22.0-9.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-requests-2.22.0-9.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f0aae6da0c3adc1ce2afc8002e1de2085429c2f1251e8a1b0a4ba94868e10e74</sum>
        </package>
        <package name="python38-idna" version="2.8" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-idna-2.8-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-idna-2.8-6.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f2a5e3f36b6b6dcfb406a36e33d0cb2a5ccecdb58f6ad2b6ef2be364fbc98eb6</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
        <package name="python38-pytz" version="2019.3" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytz-2019.3-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytz-2019.3-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f7e39d7913177c47998e2b3a6be29a29cb15561a3baad01deb9754a388c3762f</sum>
        </package>
        <package name="python38-pysocks" version="1.7.1" release="4.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pysocks-1.7.1-4.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pysocks-1.7.1-4.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">fc640ac497749830a68c783a3d77e3d53ac14c9c72fb74ec533f5f12c0a6c05e</sum>
        </package>
        <package name="python38-setuptools" version="41.6.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-setuptools-41.6.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-setuptools-41.6.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">ff19d2d739de077948f84bd9464b47f894f00ef116a40e8be06a7d2e5d3c11e2</sum>
        </package>
        <package name="python38-numpy" version="1.17.3" release="6.module_el8.6.0+2778+cd494b30" epoch="0" arch="aarch64" src="numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-numpy-1.17.3-6.module_el8.6.0+2778+cd494b30.aarch64.rpm</filename>
          <sum type="sha256">ff2cacf645aae68b3a20840f3dc0fd2255a04eeac436559c0f5adec71ccd448f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1792</id>
    <title>Moderate: flatpak security and bug fix update</title>
    <issued date="2022-05-10 08:01:39"/>
    <updated date="2022-05-10 08:01:39"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for flatpak is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: Permissions granted to applications can be hidden from the user at install time (CVE-2021-43860)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1792.html" id="ALSA-2022-1792" type="self" title="ALSA-2022-1792"/>
      <reference href="https://vulners.com/cve/CVE-2021-43860" id="CVE-2021-43860" type="cve" title="CVE-2021-43860"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="flatpak" version="1.8.7" release="1.el8" epoch="0" arch="aarch64" src="flatpak-1.8.7-1.el8.src.rpm">
          <filename>flatpak-1.8.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">287d9e91420724d125ce9932e2117f9147559c38cee3a52a3c1aa85a5da96889</sum>
        </package>
        <package name="flatpak-devel" version="1.8.7" release="1.el8" epoch="0" arch="aarch64" src="flatpak-1.8.7-1.el8.src.rpm">
          <filename>flatpak-devel-1.8.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">69d3838bd2fa5498ff9d255f36ee820632d87299229cc968a8bcd12f71df80d5</sum>
        </package>
        <package name="flatpak-libs" version="1.8.7" release="1.el8" epoch="0" arch="aarch64" src="flatpak-1.8.7-1.el8.src.rpm">
          <filename>flatpak-libs-1.8.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">962620215a65d6547d01913a0f8655b3c23e272a816a30ff9534b2a760e9cae9</sum>
        </package>
        <package name="flatpak-selinux" version="1.8.7" release="1.el8" epoch="0" arch="noarch" src="flatpak-1.8.7-1.el8.src.rpm">
          <filename>flatpak-selinux-1.8.7-1.el8.noarch.rpm</filename>
          <sum type="sha256">9e286ab3e3ac6b4210009ce4a7dae938242d633b33e23e0202b70c9185c3ce84</sum>
        </package>
        <package name="flatpak-session-helper" version="1.8.7" release="1.el8" epoch="0" arch="aarch64" src="flatpak-1.8.7-1.el8.src.rpm">
          <filename>flatpak-session-helper-1.8.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e855137561149552688696ad66e7a8f63096e84a1da5c475c64b2992db5adf41</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1796</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2022-05-10 08:01:44"/>
    <updated date="2022-05-10 08:01:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for qt5-qtbase is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke (CVE-2021-38593)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1796.html" id="ALSA-2022-1796" type="self" title="ALSA-2022-1796"/>
      <reference href="https://vulners.com/cve/CVE-2021-38593" id="CVE-2021-38593" type="cve" title="CVE-2021-38593"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="qt5-qtbase-common" version="5.15.2" release="4.el8" epoch="0" arch="noarch" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-common-5.15.2-4.el8.noarch.rpm</filename>
          <sum type="sha256">0f5ee03bc68e3dd95963ba8b205ebdfa8aaf944d0e1c4917ba18cf0f0e6877cb</sum>
        </package>
        <package name="qt5-qtbase-odbc" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-odbc-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">2490575e5899284b7c644b9f138b71fab1671435a013299a7b568d6a969d8986</sum>
        </package>
        <package name="qt5-qtbase-examples" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-examples-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">50ce224643166d768da6e91a44536de816499174031dd312fa4143950cec4196</sum>
        </package>
        <package name="qt5-qtbase-devel" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-devel-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">51bdfe3a013d85edf2e0f5202a181869470ffd669aebf1aa5edd21c1ef6565d2</sum>
        </package>
        <package name="qt5-qtbase-private-devel" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-private-devel-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">68ba2f07092aa836d469d4f59c54db3d193c9ac975ee5e3acd5b0b2dcc306257</sum>
        </package>
        <package name="qt5-qtbase" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">69a2e5e0aa3883aec9933922a26f6445f2c91b0bdc061800d14af5f6e52f04fa</sum>
        </package>
        <package name="qt5-qtbase-mysql" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-mysql-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7c368647032f3c095dc7ce633846e436f4bcb5223a1787b9a76b8a70d7364a8f</sum>
        </package>
        <package name="qt5-qtbase-postgresql" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-postgresql-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">8392aeaf86ade5c0459899c23d0e6ca263ca6b8940ee0d310eea18f7b787bdad</sum>
        </package>
        <package name="qt5-qtbase-gui" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-gui-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">a081bf0de08e5e6c4dca062bb7acaf2c0015b311ce1fc03a0dcf761e66ac1189</sum>
        </package>
        <package name="qt5-qtbase-static" version="5.15.2" release="4.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.2-4.el8.src.rpm">
          <filename>qt5-qtbase-static-5.15.2-4.el8.aarch64.rpm</filename>
          <sum type="sha256">a702525263595d6743c21b201beff03b670fa85821940111c77a2b5852339fb5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1808</id>
    <title>Moderate: aspell security update</title>
    <issued date="2022-05-10 08:02:17"/>
    <updated date="2022-05-10 08:02:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Moderate</severity>
    <summary>An update for aspell is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker.

Security Fix(es):

* aspell: Heap-buffer-overflow in acommon::ObjStack::dup_top (CVE-2019-25051)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1808.html" id="ALSA-2022-1808" type="self" title="ALSA-2022-1808"/>
      <reference href="https://vulners.com/cve/CVE-2019-25051" id="CVE-2019-25051" type="cve" title="CVE-2019-25051"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="aspell-devel" version="0.60.6.1" release="22.el8" epoch="12" arch="aarch64" src="aspell-0.60.6.1-22.el8.src.rpm">
          <filename>aspell-devel-0.60.6.1-22.el8.aarch64.rpm</filename>
          <sum type="sha256">45d2b0543c88d6b3a3d43e5b4f73747b323d83128dc0573dbf6d959f42f91b59</sum>
        </package>
        <package name="aspell" version="0.60.6.1" release="22.el8" epoch="12" arch="aarch64" src="aspell-0.60.6.1-22.el8.src.rpm">
          <filename>aspell-0.60.6.1-22.el8.aarch64.rpm</filename>
          <sum type="sha256">79acbef61f8a2b55f158ff5d6ff9c16c0a1e9f95141194bde6b69e2728af5e2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1810</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-05-10 08:02:19"/>
    <updated date="2022-05-10 08:02:18"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libtiff is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: a buffer overflow via the "invertImage()" may lead to DoS (CVE-2020-19131)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1810.html" id="ALSA-2022-1810" type="self" title="ALSA-2022-1810"/>
      <reference href="https://vulners.com/cve/CVE-2020-19131" id="CVE-2020-19131" type="cve" title="CVE-2020-19131"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libtiff-devel" version="4.0.9" release="21.el8" epoch="0" arch="aarch64" src="libtiff-4.0.9-21.el8.src.rpm">
          <filename>libtiff-devel-4.0.9-21.el8.aarch64.rpm</filename>
          <sum type="sha256">2c67d49406d7086012ca5a44b412c12007a9e5ef410f21afe744df46b7ecca9c</sum>
        </package>
        <package name="libtiff-tools" version="4.0.9" release="21.el8" epoch="0" arch="aarch64" src="libtiff-4.0.9-21.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-21.el8.aarch64.rpm</filename>
          <sum type="sha256">fbf441a8199df4d395f82fb32592f58d459401450f502dac3d4bf02e22d24dc4</sum>
        </package>
        <package name="libtiff" version="4.0.9" release="21.el8" epoch="0" arch="aarch64" src="libtiff-4.0.9-21.el8.src.rpm">
          <filename>libtiff-4.0.9-21.el8.aarch64.rpm</filename>
          <sum type="sha256">fdca25e05cd6b6bc1e01347afb188bc1130520b7fba1943ebb95f1d7f3971ab0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1820</id>
    <title>Low: udisks2 security and bug fix update</title>
    <issued date="2022-05-10 08:02:48"/>
    <updated date="2022-05-10 08:02:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Low</severity>
    <summary>An update for udisks2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.

Security Fix(es):

* udisks2: insecure defaults in user-accessible mount helpers allow for a DoS (CVE-2021-3802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1820.html" id="ALSA-2022-1820" type="self" title="ALSA-2022-1820"/>
      <reference href="https://vulners.com/cve/CVE-2021-3802" id="CVE-2021-3802" type="cve" title="CVE-2021-3802"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="udisks2-lvm2" version="2.9.0" release="9.el8" epoch="0" arch="aarch64" src="udisks2-2.9.0-9.el8.src.rpm">
          <filename>udisks2-lvm2-2.9.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">0a86e2abe4eab1a48dff30d10dabfe46aa8e6ddad56ff2b74f77f31cf864a2fe</sum>
        </package>
        <package name="libudisks2" version="2.9.0" release="9.el8" epoch="0" arch="aarch64" src="udisks2-2.9.0-9.el8.src.rpm">
          <filename>libudisks2-2.9.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">1b9be5f05eebe5ce3472ac485e6cdeba6db3b9ce99cea450e68a94754438dd63</sum>
        </package>
        <package name="udisks2-lsm" version="2.9.0" release="9.el8" epoch="0" arch="aarch64" src="udisks2-2.9.0-9.el8.src.rpm">
          <filename>udisks2-lsm-2.9.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">3abf3e176a2de2d690c0018f61664477bfd0d4e059e0359f11449c48eeee584f</sum>
        </package>
        <package name="udisks2-iscsi" version="2.9.0" release="9.el8" epoch="0" arch="aarch64" src="udisks2-2.9.0-9.el8.src.rpm">
          <filename>udisks2-iscsi-2.9.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">889bba49e8aee5d06c7c8d69c6cdaa83597e70ae2fc67eac4ac015fd47ae86eb</sum>
        </package>
        <package name="libudisks2-devel" version="2.9.0" release="9.el8" epoch="0" arch="aarch64" src="udisks2-2.9.0-9.el8.src.rpm">
          <filename>libudisks2-devel-2.9.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">9c89654710981c9c675cbc118db337e4492daf7908020c28afdbb522a8444233</sum>
        </package>
        <package name="udisks2" version="2.9.0" release="9.el8" epoch="0" arch="aarch64" src="udisks2-2.9.0-9.el8.src.rpm">
          <filename>udisks2-2.9.0-9.el8.aarch64.rpm</filename>
          <sum type="sha256">c3209e38f92a220f6c173b9b18e43ddd463c6d8bba93abd42c67882a43ebfb5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2022:1842</id>
    <title>Moderate: exiv2 security, bug fix, and enhancement update</title>
    <issued date="2022-05-10 06:31:43"/>
    <updated date="2022-05-10 08:04:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for exiv2 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats.

The following packages have been upgraded to a later upstream version: exiv2 (0.27.5). (BZ#2018422)

Security Fix(es):

* exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS (CVE-2020-18898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1842.html" id="ALSA-2022-1842" type="self" title="ALSA-2022-1842"/>
      <reference href="https://vulners.com/cve/CVE-2020-18898" id="CVE-2020-18898" type="cve" title="CVE-2020-18898"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="exiv2" version="0.27.5" release="2.el8" epoch="0" arch="aarch64" src="exiv2-0.27.5-2.el8.src.rpm">
          <filename>exiv2-0.27.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7cc358a1978c9d39098dfd28a9d91f90bcbd67f518cd3b15243730ad8e81024a</sum>
        </package>
        <package name="exiv2-libs" version="0.27.5" release="2.el8" epoch="0" arch="aarch64" src="exiv2-0.27.5-2.el8.src.rpm">
          <filename>exiv2-libs-0.27.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">bbb61fbf2e893f94ed644df63601625df0020eee6bbd8984c643ac20ce67f139</sum>
        </package>
        <package name="exiv2-devel" version="0.27.5" release="2.el8" epoch="0" arch="aarch64" src="exiv2-0.27.5-2.el8.src.rpm">
          <filename>exiv2-devel-0.27.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d3aa877c2b5b1355b3bdcb9478172dd1c4185711795255002f83e396232701e8</sum>
        </package>
        <package name="exiv2-doc" version="0.27.5" release="2.el8" epoch="0" arch="noarch" src="exiv2-0.27.5-2.el8.src.rpm">
          <filename>exiv2-doc-0.27.5-2.el8.noarch.rpm</filename>
          <sum type="sha256">df7ab4600bab9199e398fdc1b3409ed8379295fc39d1e7dbdda3b64bce8267e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1917</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2022-05-10 00:00:00"/>
    <updated date="2022-06-30 13:08:08"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for xorg-x11-server-source is now available for AlmaLinux 8.</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.
Xwayland is an X server for running X clients under Wayland.
The following packages have been upgraded to a later upstream version: xorg-x11-server-Xwayland (21.1.3). (BZ#2015842)
Security Fix(es):
* xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access (CVE-2021-4008)
* xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access (CVE-2021-4009)
* xorg-x11-server: SProcScreenSaverSuspend out-of-bounds access (CVE-2021-4010)
* xorg-x11-server: SwapCreateRegister out-of-bounds access (CVE-2021-4011)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:1917" id="RHSA-2022:1917" type="rhsa" title="RHSA-2022:1917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4008" id="CVE-2021-4008" type="cve" title="CVE-2021-4008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4009" id="CVE-2021-4009" type="cve" title="CVE-2021-4009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4010" id="CVE-2021-4010" type="cve" title="CVE-2021-4010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4011" id="CVE-2021-4011" type="cve" title="CVE-2021-4011"/>
      <reference href="https://bugzilla.redhat.com/2026059" id="2026059" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026072" id="2026072" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026073" id="2026073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2026074" id="2026074" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1917.html" id="ALSA-2022:1917" type="self" title="ALSA-2022:1917"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="xorg-x11-server-Xnest" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-Xnest-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">101a41a2fe8ef15aa92b46bd0ed8fb7824e13fc3e9b1e7889fa124ca57d953c1</sum>
        </package>
        <package name="xorg-x11-server-common" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-common-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">2b7bf08dbed6eface7aaf2bd8016e0942cf941370183b3f5c0758f74b2fc6309</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">2ba9058b46bd6dbc91948998cfd03c8978508260f174d80872575312c8ee7873</sum>
        </package>
        <package name="xorg-x11-server-Xdmx" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-Xdmx-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">2ebd8950553d0f98af6b80ecdec1e6117d48042b16205305ac4b499f2287c542</sum>
        </package>
        <package name="xorg-x11-server-Xwayland" version="21.1.3" release="2.el8" epoch="0" arch="aarch64" src="xorg-x11-server-Xwayland-21.1.3-2.el8.src.rpm">
          <filename>xorg-x11-server-Xwayland-21.1.3-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8953cb8a6de784ba7a870403fcd46fdb4acd5723a63036a2abb37a898ec54c49</sum>
        </package>
        <package name="xorg-x11-server-Xorg" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-Xorg-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">a44002fbf419039b835040f20ce5d0c6253305270dbe6fde8d41021c56881978</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="5.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-5.el8.noarch.rpm</filename>
          <sum type="sha256">a7369303e1a4fe87a75df5cb0466f9d0260ab3b25a09702bd30f4df8d93955e4</sum>
        </package>
        <package name="xorg-x11-server-Xephyr" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-Xephyr-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">bef2919bae719a2e7cc3fffbc63189b15b18c27931d0cd0ad9fcf42903e5653d</sum>
        </package>
        <package name="xorg-x11-server-Xvfb" version="1.20.11" release="5.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-5.el8.src.rpm">
          <filename>xorg-x11-server-Xvfb-1.20.11-5.el8.aarch64.rpm</filename>
          <sum type="sha256">ff0b92c0f8ebe4ee525f398d4dbdf88c88fc2a0b4ef313d14bfff88b208102b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1950</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2022-05-10 08:08:56"/>
    <updated date="2022-05-10 08:08:55"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for dovecot is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

The following packages have been upgraded to a later upstream version: dovecot (2.3.16). (BZ#1980014)

Security Fix(es):

* dovecot: plaintext commands injection (CVE-2021-33515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1950.html" id="ALSA-2022-1950" type="self" title="ALSA-2022-1950"/>
      <reference href="https://vulners.com/cve/CVE-2021-33515" id="CVE-2021-33515" type="cve" title="CVE-2021-33515"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="dovecot-mysql" version="2.3.16" release="2.el8" epoch="1" arch="aarch64" src="dovecot-2.3.16-2.el8.src.rpm">
          <filename>dovecot-mysql-2.3.16-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1bf40e13e29cc0f23feddd00f3b9839d9710bf51e7503241dc3068731c9c316e</sum>
        </package>
        <package name="dovecot" version="2.3.16" release="2.el8" epoch="1" arch="aarch64" src="dovecot-2.3.16-2.el8.src.rpm">
          <filename>dovecot-2.3.16-2.el8.aarch64.rpm</filename>
          <sum type="sha256">20363bfd90388db23ba9c77bb46595497b85d36ee7a91cb4630c55055e0ed8fb</sum>
        </package>
        <package name="dovecot-pgsql" version="2.3.16" release="2.el8" epoch="1" arch="aarch64" src="dovecot-2.3.16-2.el8.src.rpm">
          <filename>dovecot-pgsql-2.3.16-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5482c458007e428d76b516f8c75349f826cf0fd77ccafd952017cf8f2af00973</sum>
        </package>
        <package name="dovecot-devel" version="2.3.16" release="2.el8" epoch="1" arch="aarch64" src="dovecot-2.3.16-2.el8.src.rpm">
          <filename>dovecot-devel-2.3.16-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d0fbad16acbbd74f45ce944a8cd2ccbdf6570a047f1a936bd41d1b42720ea0cf</sum>
        </package>
        <package name="dovecot-pigeonhole" version="2.3.16" release="2.el8" epoch="1" arch="aarch64" src="dovecot-2.3.16-2.el8.src.rpm">
          <filename>dovecot-pigeonhole-2.3.16-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ee959138c3a9cafef7b4fc954e9ed36e26e158d42699b93a1b6256e8d72af66e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1968</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2022-05-10 08:10:12"/>
    <updated date="2022-05-10 08:10:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>2</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libsndfile is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: heap out-of-bounds read in src/flac.c in flac_buffer_copy (CVE-2021-4156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1968.html" id="ALSA-2022-1968" type="self" title="ALSA-2022-1968"/>
      <reference href="https://vulners.com/cve/CVE-2021-4156" id="CVE-2021-4156" type="cve" title="CVE-2021-4156"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="libsndfile" version="1.0.28" release="12.el8" epoch="0" arch="aarch64" src="libsndfile-1.0.28-12.el8.src.rpm">
          <filename>libsndfile-1.0.28-12.el8.aarch64.rpm</filename>
          <sum type="sha256">6e3a8205eb9ab28b4bb78a7c0e99a510744f6920ea7d38c8e0d3ac333d164010</sum>
        </package>
        <package name="libsndfile-devel" version="1.0.28" release="12.el8" epoch="0" arch="aarch64" src="libsndfile-1.0.28-12.el8.src.rpm">
          <filename>libsndfile-devel-1.0.28-12.el8.aarch64.rpm</filename>
          <sum type="sha256">ab0a24151b5ae6799ce71a191dc847a96eb04864147027a198c8087ce6d01cf6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:1988</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-05-10 08:11:36"/>
    <updated date="2022-05-10 08:11:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>28</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)

* kernel: avoid cyclic entity chains due to malformed USB descriptors (CVE-2020-0404)

* kernel: speculation on incompletely validated data on IBM Power9 (CVE-2020-4788)

* kernel: integer overflow in k_ascii() in drivers/tty/vt/keyboard.c (CVE-2020-13974)

* kernel: out-of-bounds read in bpf_skb_change_head() of filter.c due to a use-after-free (CVE-2021-0941)

* kernel: joydev: zero size passed to joydev_handle_JSIOCSBTNMAP() (CVE-2021-3612)

* kernel: reading /proc/sysvipc/shm does not scale with large shared memory segment counts (CVE-2021-3669)

* kernel: out-of-bound Read in qrtr_endpoint_post in net/qrtr/qrtr.c (CVE-2021-3743)

* kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744)

* kernel: possible use-after-free in bluetooth module (CVE-2021-3752)

* kernel: unaccounted ipc objects in Linux kernel lead to breaking memcg limits and DoS attacks (CVE-2021-3759)

* kernel: DoS in ccp_run_aes_gcm_cmd() function (CVE-2021-3764)

* kernel: sctp: Invalid chunks may be used to remotely remove existing associations (CVE-2021-3772)

* kernel: lack of port sanity checking in natd and netfilter leads to exploit of OpenVPN clients (CVE-2021-3773)

* kernel: possible leak or coruption of data residing on hugetlbfs (CVE-2021-4002)

* kernel: security regression for CVE-2018-13405 (CVE-2021-4037)

* kernel: Buffer overwrite in decode_nfs_fh function (CVE-2021-4157)

* kernel: cgroup: Use open-time creds and namespace for migration perm checks (CVE-2021-4197)

* kernel: Race condition in races in sk_peer_pid and sk_peer_cred accesses (CVE-2021-4203)

* kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies (CVE-2021-20322)

* kernel: arm: SIGPAGE information disclosure vulnerability (CVE-2021-21781)

* hw: cpu: LFENCE/JMP Mitigation Update for CVE-2017-5715 (CVE-2021-26401)

* kernel: Local privilege escalation due to incorrect BPF JIT branch displacement computation (CVE-2021-29154)

* kernel: use-after-free in hso_free_net_device() in drivers/net/usb/hso.c (CVE-2021-37159)

* kernel: eBPF multiplication integer overflow in prealloc_elems_and_freelist() in kernel/bpf/stackmap.c leads to out-of-bounds write (CVE-2021-41864)

* kernel: Heap buffer overflow in firedtv driver (CVE-2021-42739)

* kernel: ppc: kvm: allows a malicious KVM guest to crash the host (CVE-2021-43056)

* kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (CVE-2021-43389)

* kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS via crafted USB device (CVE-2021-43976)

* kernel: use-after-free in the TEE subsystem (CVE-2021-44733)

* kernel: information leak in the IPv6 implementation (CVE-2021-45485)

* kernel: information leak in the IPv4 implementation (CVE-2021-45486)

* hw: cpu: intel: Branch History Injection (BHI) (CVE-2022-0001)

* hw: cpu: intel: Intra-Mode BTI (CVE-2022-0002)

* kernel: Local denial of service in bond_ipsec_add_sa (CVE-2022-0286)

* kernel: DoS in sctp_addto_chunk in net/sctp/sm_make_chunk.c (CVE-2022-0322)

* kernel: FUSE allows UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes (CVE-2022-1011)

* kernel: use-after-free in nouveau kernel module (CVE-2020-27820)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <reboot_suggested>True</reboot_suggested>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-1988.html" id="ALSA-2022-1988" type="self" title="ALSA-2022-1988"/>
      <reference href="https://vulners.com/cve/CVE-2020-0404" id="CVE-2020-0404" type="cve" title="CVE-2020-0404"/>
      <reference href="https://vulners.com/cve/CVE-2020-13974" id="CVE-2020-13974" type="cve" title="CVE-2020-13974"/>
      <reference href="https://vulners.com/cve/CVE-2020-27820" id="CVE-2020-27820" type="cve" title="CVE-2020-27820"/>
      <reference href="https://vulners.com/cve/CVE-2020-4788" id="CVE-2020-4788" type="cve" title="CVE-2020-4788"/>
      <reference href="https://vulners.com/cve/CVE-2021-0941" id="CVE-2021-0941" type="cve" title="CVE-2021-0941"/>
      <reference href="https://vulners.com/cve/CVE-2021-20322" id="CVE-2021-20322" type="cve" title="CVE-2021-20322"/>
      <reference href="https://vulners.com/cve/CVE-2021-21781" id="CVE-2021-21781" type="cve" title="CVE-2021-21781"/>
      <reference href="https://vulners.com/cve/CVE-2021-26401" id="CVE-2021-26401" type="cve" title="CVE-2021-26401"/>
      <reference href="https://vulners.com/cve/CVE-2021-29154" id="CVE-2021-29154" type="cve" title="CVE-2021-29154"/>
      <reference href="https://vulners.com/cve/CVE-2021-3612" id="CVE-2021-3612" type="cve" title="CVE-2021-3612"/>
      <reference href="https://vulners.com/cve/CVE-2021-3669" id="CVE-2021-3669" type="cve" title="CVE-2021-3669"/>
      <reference href="https://vulners.com/cve/CVE-2021-37159" id="CVE-2021-37159" type="cve" title="CVE-2021-37159"/>
      <reference href="https://vulners.com/cve/CVE-2021-3743" id="CVE-2021-3743" type="cve" title="CVE-2021-3743"/>
      <reference href="https://vulners.com/cve/CVE-2021-3744" id="CVE-2021-3744" type="cve" title="CVE-2021-3744"/>
      <reference href="https://vulners.com/cve/CVE-2021-3752" id="CVE-2021-3752" type="cve" title="CVE-2021-3752"/>
      <reference href="https://vulners.com/cve/CVE-2021-3759" id="CVE-2021-3759" type="cve" title="CVE-2021-3759"/>
      <reference href="https://vulners.com/cve/CVE-2021-3764" id="CVE-2021-3764" type="cve" title="CVE-2021-3764"/>
      <reference href="https://vulners.com/cve/CVE-2021-3772" id="CVE-2021-3772" type="cve" title="CVE-2021-3772"/>
      <reference href="https://vulners.com/cve/CVE-2021-3773" id="CVE-2021-3773" type="cve" title="CVE-2021-3773"/>
      <reference href="https://vulners.com/cve/CVE-2021-4002" id="CVE-2021-4002" type="cve" title="CVE-2021-4002"/>
      <reference href="https://vulners.com/cve/CVE-2021-4037" id="CVE-2021-4037" type="cve" title="CVE-2021-4037"/>
      <reference href="https://vulners.com/cve/CVE-2021-4083" id="CVE-2021-4083" type="cve" title="CVE-2021-4083"/>
      <reference href="https://vulners.com/cve/CVE-2021-4157" id="CVE-2021-4157" type="cve" title="CVE-2021-4157"/>
      <reference href="https://vulners.com/cve/CVE-2021-41864" id="CVE-2021-41864" type="cve" title="CVE-2021-41864"/>
      <reference href="https://vulners.com/cve/CVE-2021-4197" id="CVE-2021-4197" type="cve" title="CVE-2021-4197"/>
      <reference href="https://vulners.com/cve/CVE-2021-4203" id="CVE-2021-4203" type="cve" title="CVE-2021-4203"/>
      <reference href="https://vulners.com/cve/CVE-2021-42739" id="CVE-2021-42739" type="cve" title="CVE-2021-42739"/>
      <reference href="https://vulners.com/cve/CVE-2021-43056" id="CVE-2021-43056" type="cve" title="CVE-2021-43056"/>
      <reference href="https://vulners.com/cve/CVE-2021-43389" id="CVE-2021-43389" type="cve" title="CVE-2021-43389"/>
      <reference href="https://vulners.com/cve/CVE-2021-43976" id="CVE-2021-43976" type="cve" title="CVE-2021-43976"/>
      <reference href="https://vulners.com/cve/CVE-2021-44733" id="CVE-2021-44733" type="cve" title="CVE-2021-44733"/>
      <reference href="https://vulners.com/cve/CVE-2021-45485" id="CVE-2021-45485" type="cve" title="CVE-2021-45485"/>
      <reference href="https://vulners.com/cve/CVE-2021-45486" id="CVE-2021-45486" type="cve" title="CVE-2021-45486"/>
      <reference href="https://vulners.com/cve/CVE-2022-0001" id="CVE-2022-0001" type="cve" title="CVE-2022-0001"/>
      <reference href="https://vulners.com/cve/CVE-2022-0002" id="CVE-2022-0002" type="cve" title="CVE-2022-0002"/>
      <reference href="https://vulners.com/cve/CVE-2022-0286" id="CVE-2022-0286" type="cve" title="CVE-2022-0286"/>
      <reference href="https://vulners.com/cve/CVE-2022-0322" id="CVE-2022-0322" type="cve" title="CVE-2022-0322"/>
      <reference href="https://vulners.com/cve/CVE-2022-1011" id="CVE-2022-1011" type="cve" title="CVE-2022-1011"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="kernel-debug-modules" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-debug-modules-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">1e10aa65c8d8156b9b24f13b2542dcf6ce6df2cc74a8c3f7a8f55181ebecbf07</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-modules-extra-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">2a7adb3e537c1eb13a20009ca95367786de24490e10cbdb187d73086999a7388</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.9.1.el8" epoch="0" arch="noarch" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-doc-4.18.0-372.9.1.el8.noarch.rpm</filename>
          <sum type="sha256">3eb91c883f9916aabbec3ef5703831775532cc30c68345847843b3f563e30923</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-tools-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">48150e917e4b23d6ab8b66f9a795b118ed5f5864a4a3ed3abe72dd7671c0d99b</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-debug-core-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">557583adc1e3fb4ef9ec858d3bf82e2bc21bb744bf8a26235ba7fbf091988878</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>bpftool-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">8200f19f207587d4169c7f5ea8a86da7f3836ca5bf7b8e9f8272de9b4d3ad975</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.9.1.el8" epoch="0" arch="noarch" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-372.9.1.el8.noarch.rpm</filename>
          <sum type="sha256">8520180d4e4b9d6d83d3ff4e863c4b61b7a716f9d15653e3e594c2e640383ba2</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-core-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">905f19fa2e6741077424ee997e8952432164dd4819a1bb2f839a8445f43aac79</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-debug-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">992690c119a50175aced87a81381909dc31e596a2595fb716a465e9c06681f5c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-tools-libs-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">acd4366608133deb1ee17c462e49f009c963a8e3d42df68bd41b03e2d8f4784b</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-debug-devel-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">d2bcb7a87b78f68cc28d6ebeb8cc4942c5353bcb12123d2b619d1080cb81fbe6</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-modules-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">d7cf2a7b16657392de282a4aa17e9c70a1725f1c053b5aa7e9a074ed3246e14f</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-cross-headers-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">d9838a8678db02e09c7936af4f012a9520b5e34c754aabcba6e2818e1753dda5</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>perf-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">da4329334aceb42167f1d0c4fbc41a8949a72bcad8aa5a69b2171afd619d954f</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>python3-perf-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">db7211119e4d25036a9b1456a0222ded00795b79319735aee6a94d2d09448f49</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">e5ea5e0042203c1529d3bacacaf88fad31911029ea396ac9c0170c14cf78ffac</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-devel-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">e764e689ae432358ad641f2e791f0de9356ec64820fb2db216c7a731be34f80b</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">ed91d2682f63e26ee0ce8f82885850aa7fbe4a1060c141a16c97595979a0fbb1</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-headers-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">ef5a323f6c5d48c19edc9fe7c39070853032f9a70e13c2af97aedd98a2fe241c</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.9.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-372.9.1.el8.src.rpm">
          <filename>kernel-debug-modules-extra-4.18.0-372.9.1.el8.aarch64.rpm</filename>
          <sum type="sha256">ffae3e364146d25b82a0ee958e8d99f374479a4d3c0c9ad68dfc095da054c8d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:2074</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2022-05-10 00:00:00"/>
    <updated date="2022-06-29 11:19:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>An update for libwbclient-devel is now available for AlmaLinux 8.</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
The following packages have been upgraded to a later upstream version: samba (4.15.5). (BZ#2013596)
Security Fix(es):
* samba: Symlink race error can allow metadata read and modify outside of the exported share (CVE-2021-20316)
* samba: Information leak via symlinks of existance of files or directories outside of the exported share (CVE-2021-44141)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:2074" id="RHSA-2022:2074" type="rhsa" title="RHSA-2022:2074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-20316" id="CVE-2021-20316" type="cve" title="CVE-2021-20316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44141" id="CVE-2021-44141" type="cve" title="CVE-2021-44141"/>
      <reference href="https://bugzilla.redhat.com/2009673" id="2009673" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2046120" id="2046120" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-2074.html" id="ALSA-2022:2074" type="self" title="ALSA-2022:2074"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="libsmbclient-devel" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>libsmbclient-devel-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">04635dc1ef84064f0064b2b3ce24c9f3265380bc5cb794b089593757396c54dd</sum>
        </package>
        <package name="python3-samba" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>python3-samba-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">12f57aaf4004d10eb029aa14ced14ba02519b01fe185858556620b835b4ac78e</sum>
        </package>
        <package name="samba-test-libs" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-test-libs-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">267836817dc4b3824b3e141085d9fb7849aa4c2c4755d0606039f7b0ca9d60e4</sum>
        </package>
        <package name="python3-samba-test" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>python3-samba-test-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">2862c3a7f979f118e371996b2f2c9702ca90003ccc7fca7dcd545b77da6826ce</sum>
        </package>
        <package name="samba-test" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-test-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">300e128fd05313a622f9cae628ec5b4f08e767808404c9bea49d9a14f02812ed</sum>
        </package>
        <package name="samba-libs" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-libs-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">4fa732c96eca6da4b6c5071a6d4f4b0eb96c4445784c78e96a2399f9aae44747</sum>
        </package>
        <package name="libwbclient-devel" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>libwbclient-devel-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">5adfd45fc9e6a64a52c28af04e97da82e5ed7dffdaae23bb91a9bccf2d018314</sum>
        </package>
        <package name="samba-common-libs" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-common-libs-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">5f45ff1931090e424284aab321b84faad25547b4674e631218ab377f9cb67aaf</sum>
        </package>
        <package name="samba-client-libs" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-client-libs-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">654601b22a771ebd1b6f9467f64f7798ab5fa91b32e5cce1d145398d70ae4709</sum>
        </package>
        <package name="samba-devel" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-devel-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">6d09321d77acc9bde62c755f890aafd633853925cace6369a1221ba9f89e2f84</sum>
        </package>
        <package name="samba-winbind-modules" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-winbind-modules-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">7d294cf9a17c3309e93f536365167a9d59143c14f63cc4746630da72269e84c2</sum>
        </package>
        <package name="ctdb" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>ctdb-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">803602435e437c64cffd777921331278ce95a93a416900211f1388660d610c2e</sum>
        </package>
        <package name="samba-common" version="4.15.5" release="5.el8" epoch="0" arch="noarch" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-common-4.15.5-5.el8.noarch.rpm</filename>
          <sum type="sha256">94d930ffd51b5f64a5d960aec323746b401702f75d968f52b35558e6619b4994</sum>
        </package>
        <package name="samba-client" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-client-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">9a81cd2b5010fd18b91f88433c168d394fef16766552208532c072f573cd842e</sum>
        </package>
        <package name="samba-krb5-printing" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-krb5-printing-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">a9bb71f8ece84e3bde3aff8a7fe32bb5f17ca4e5a8ecfcf590fa21cf1d402b68</sum>
        </package>
        <package name="samba-winbind-clients" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-winbind-clients-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">b373caca6c58b5b4fb5a19660abf7390bcf7cd318fd04c228c973ae99336b7f0</sum>
        </package>
        <package name="samba-pidl" version="4.15.5" release="5.el8" epoch="0" arch="noarch" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-pidl-4.15.5-5.el8.noarch.rpm</filename>
          <sum type="sha256">b7feac085f3c0e0dd800ca003e9d49ac4209e09dde014586a2345ada517b27f9</sum>
        </package>
        <package name="samba-common-tools" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-common-tools-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">c0eff180fe3b507182faab399f48b1f3646eef28a2e2599267774cb722caeaea</sum>
        </package>
        <package name="samba-winbind" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-winbind-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">c247dd5780f586d5c51120a6e02c0cfdd96f7c4ce22c3e9fd29b4f4b48fc6cc7</sum>
        </package>
        <package name="samba-vfs-iouring" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-vfs-iouring-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">d15ff2cc4f0da3d5a643f83cd6bfd660e3585ec9284be1326daef8ba7a8cd5ee</sum>
        </package>
        <package name="samba" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">e88883c15a37f9dc7a2fcb3acc3930aba4201ff0efffef2e5c9a81f2aef0ec10</sum>
        </package>
        <package name="samba-winbind-krb5-locator" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>samba-winbind-krb5-locator-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">f22b680750803188034d1687ccea1b5e10afbca1773002ee986ceda3d60abe87</sum>
        </package>
        <package name="libwbclient" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>libwbclient-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">f7ec9e9dde4a16893fc4d7c9a48d552102414e6b50abc720098ee6d5395d214e</sum>
        </package>
        <package name="libsmbclient" version="4.15.5" release="5.el8" epoch="0" arch="aarch64" src="samba-4.15.5-5.el8.src.rpm">
          <filename>libsmbclient-4.15.5-5.el8.aarch64.rpm</filename>
          <sum type="sha256">fd591e31b918184ec5c0bc6cebbf2a54355d7354a0cd06d8c50b1e1a45396632</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="5">
    <id>ALSA-2022:2081</id>
    <title>Low: bluez security update</title>
    <issued date="2022-05-10 06:51:59"/>
    <updated date="2022-05-10 08:15:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>4</pushcount>
    <severity>Low</severity>
    <summary>An update for bluez is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files. 

Security Fix(es):

* bluez: memory leak in the SDP protocol (CVE-2021-41229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-2081.html" id="ALSA-2022-2081" type="self" title="ALSA-2022-2081"/>
      <reference href="https://vulners.com/cve/CVE-2021-41229" id="CVE-2021-41229" type="cve" title="CVE-2021-41229"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="bluez-libs" version="5.56" release="3.el8" epoch="0" arch="aarch64" src="bluez-5.56-3.el8.src.rpm">
          <filename>bluez-libs-5.56-3.el8.aarch64.rpm</filename>
          <sum type="sha256">18731e5002e92c4ff58c97902c4242ffe0910ffc46aaf8f1e1533971d4c4a65f</sum>
        </package>
        <package name="bluez" version="5.56" release="3.el8" epoch="0" arch="aarch64" src="bluez-5.56-3.el8.src.rpm">
          <filename>bluez-5.56-3.el8.aarch64.rpm</filename>
          <sum type="sha256">23ba11c1a5b38195fe7950b90173f436b56f896ab4db6aa786496b5e1adc5ee9</sum>
        </package>
        <package name="bluez-obexd" version="5.56" release="3.el8" epoch="0" arch="aarch64" src="bluez-5.56-3.el8.src.rpm">
          <filename>bluez-obexd-5.56-3.el8.aarch64.rpm</filename>
          <sum type="sha256">27d66358e733c23fa00aea160abf7b632f86b241f74e3b5f183ed3a0fd557781</sum>
        </package>
        <package name="bluez-cups" version="5.56" release="3.el8" epoch="0" arch="aarch64" src="bluez-5.56-3.el8.src.rpm">
          <filename>bluez-cups-5.56-3.el8.aarch64.rpm</filename>
          <sum type="sha256">35699a9d273b41f9424e2006f27bd67487d6ec79eb010f65d8e0494e50caf97d</sum>
        </package>
        <package name="bluez-hid2hci" version="5.56" release="3.el8" epoch="0" arch="aarch64" src="bluez-5.56-3.el8.src.rpm">
          <filename>bluez-hid2hci-5.56-3.el8.aarch64.rpm</filename>
          <sum type="sha256">b577e139b4fd2ce6954270bc89b402ba229e9228976c5f6a09a0fa1d4d15b231</sum>
        </package>
        <package name="bluez-libs-devel" version="5.56" release="3.el8" epoch="0" arch="aarch64" src="bluez-5.56-3.el8.src.rpm">
          <filename>bluez-libs-devel-5.56-3.el8.aarch64.rpm</filename>
          <sum type="sha256">dee44c5465e2f1cb79c368aa414feb9bf710f8ce7703107ce76e32e51838b019</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="4">
    <id>ALSA-2022:2129</id>
    <title>Moderate: lynx security update</title>
    <issued date="2022-05-10 06:57:37"/>
    <updated date="2022-05-10 08:18:57"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>3</pushcount>
    <severity>Moderate</severity>
    <summary>An update for lynx is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>Lynx is a text-based Web browser. Lynx does not display any images, but it does support frames, tables, and most other HTML tags.

Security Fix(es):

* lynx: Disclosure of HTTP authentication credentials via SNI data (CVE-2021-38165)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-2129.html" id="ALSA-2022-2129" type="self" title="ALSA-2022-2129"/>
      <reference href="https://vulners.com/cve/CVE-2021-38165" id="CVE-2021-38165" type="cve" title="CVE-2021-38165"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="lynx" version="2.8.9" release="4.el8" epoch="0" arch="aarch64" src="lynx-2.8.9-4.el8.src.rpm">
          <filename>lynx-2.8.9-4.el8.aarch64.rpm</filename>
          <sum type="sha256">dd403b8d951d4bfde7d99c13968368acd67a8ef0cd62eec0a509c7298062ba4c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:2199</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2022-05-11 13:20:34"/>
    <updated date="2022-05-11 13:20:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>8</pushcount>
    <severity>Important</severity>
    <summary>An update for .NET 6.0 is now available for AlmaLinux

AlmaLinux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.</summary>
    <description>.NET Core is a managed-software framework. It implements a subset of the .NET
framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.

Security Fix(es):

* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)

* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)

* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution></solution>
    <references>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-2199.html" id="ALSA-2022-2199" type="self" title="ALSA-2022-2199"/>
      <reference href="https://vulners.com/cve/CVE-2022-23267" id="CVE-2022-23267" type="cve" title="CVE-2022-23267"/>
      <reference href="https://vulners.com/cve/CVE-2022-29117" id="CVE-2022-29117" type="cve" title="CVE-2022-29117"/>
      <reference href="https://vulners.com/cve/CVE-2022-29145" id="CVE-2022-29145" type="cve" title="CVE-2022-29145"/>
    </references>
    <pkglist>
      <collection short="codeready-builder-for-rhel-8-aarch64-rpms__8_0_default">
        <name>codeready-builder-for-rhel-8-aarch64-rpms__8_0_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.105" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.105-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0017e5739878e39cd0cdbd9896fb397913c65f783ca869da69a0cb91f0db0b9d</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0111b386f460f1d76a7be594e54ce6eb354668c8fdfd6d292c618ddf8c1625cf</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">215f63fd3f59adf21d782282a2479c2eb39eb04a93f6749b26eb944bf2d17589</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3b60dc55105d45c2e27f4321f56e545ee38d29e4680dd2bfe31c085463a6d07e</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.105" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.105-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">5af9b540bacfbb0b02c6dc48036acceb24e8168b42128850c1e461eab8050dc2</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">624a1db802ff500eb4dc388293859f8ab30e554df659d132d00bdc9230f6d51e</sum>
        </package>
        <package name="dotnet" version="6.0.105" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-6.0.105-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">667ed3f1d681e0816961e115dcb74e1c5d9afb6a138c603084ca05e797ac1ca8</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9ea9ab88ba830fbbf4bcee6bff81bdd8593661ba628f2fbe0b4a7bde40d2078e</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.105" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.105-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b2d8b987c9bc130cbc8a84c31474e7d0570cf92cee48eeb0f9f654d50c6354f5</sum>
        </package>
        <package name="dotnet-host" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-host-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c2133e943150c5b1cf27b891ec70b2a78197521610db9961c35f80070ce5c490</sum>
        </package>
        <package name="aspnetcore-runtime-6.0" version="6.0.5" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.5-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c637185bf7e2f55923e837dd16becab8dcf98943f78c1baf6435a3dccb383dfc</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.105" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.105-1.el8_6.src.rpm">
          <filename>dotnet-templates-6.0-6.0.105-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">e9ed4548d60cd1c9b9d4e06ba75345d0397022e5caae6266fef0db1c730c03a2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:4991</id>
    <title>Important: xz security update</title>
    <issued date="2022-06-13 00:00:00"/>
    <updated date="2023-03-07 17:08:43"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xz security update</summary>
    <description>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:4991" id="RHSA-2022:4991" type="rhsa" title="RHSA-2022:4991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1271" id="CVE-2022-1271" type="cve" title="CVE-2022-1271"/>
      <reference href="https://bugzilla.redhat.com/2073310" id="2073310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-4991.html" id="ALSA-2022:4991" type="self" title="ALSA-2022:4991"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="xz-lzma-compat" version="5.2.4" release="4.el8_6" epoch="0" arch="aarch64" src="xz-5.2.4-4.el8_6.src.rpm">
          <filename>xz-lzma-compat-5.2.4-4.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0825579af8d2b66ac200a3b9f4088107f2ceef91bc7685e55c97b01f04c94a56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5316</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2022-06-30 00:00:00"/>
    <updated date="2022-07-21 17:53:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-tools-libs-devel is now available for AlmaLinux 8.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: buffer overflow in IPsec ESP transformation code (CVE-2022-27666)
* kernel: out-of-bounds read in fbcon_get_font function (CVE-2020-28915)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* weird port mapping with asymmetric traffic (BZ#2065266)
* HBR3 is malfunction via MST HUB against Intel ADL-HX CPU (BZ#2066644)
* openvswitch connection tracking sends incorrect flow key for some upcalls (BZ#2068476)
* sctp connection abort unexpected. (BZ#2070959)
* soft quota cannot exceed more the 5 warns which breaks timer functionality (BZ#2071713)
* VirtIO Throughput for VM on host with OVS HW-Offload is very low (BZ#2074221)
* SR-IOV performance &gt; 50% degradation (BZ#2074829)
* Call trace with parallel rules insertion and deletion (BZ#2075553)
* Enable nested virtualization (BZ#2079069)
* iscsi_ttx (iSERT) completions hung while waiting for mlx5_ib_drain_sq (BZ#2079433)
* WARNING: CPU: 2 PID: 969 at kernel/locking/lockdep.c:895 register_lock_class+0x234/0x1640 (BZ#2079856)
* mlx5: Some rule are not offloaded to HW in OVN K8s Pod 2 External use case (BZ#2079918)
* OCP node kernel crash due to ceph_fsync - unsafe_request_wait+0x143 (BZ#2080071)
* TCP doesn't retransmit if in reorder state and waits for RTO (BZ#2080972)
* pnfs NFSv4.1 IO causes a soft lockup (after a server reboot) and an unresponsive client (BZ#2080998)
* BlueField2:  DPU can't switch to switchdev mode (BZ#2081011)
* Important ice bug fixes (BZ#2081794)
* For isolated CPUs (with nohz_full enabled for isolated CPUs) CPU utilization statistics are not getting reflected continuously (BZ#2084138)
* Host is getting crash/abrupt reboot while  the guest has been assigned with more than 128 GB RAM while it is using NVIDIA proprietary module. (BZ#2085572)
* s_pf0vf2: hw csum failure for mlx5 (BZ#2086549)
* kernel memory leak while freeing nested actions (BZ#2086590)
* Regression: Bluetooth will not activate after 8.5 update (BZ#2087641)
* mlx5,Internal port - traffic not offloaded on tunnel interface rules on chain &gt; 0 when internal port is the vtep device. (BZ#2088610)
* rule not offloaded on server side with syndrome(0x389e56) when direction is in (BZ#2088611)
* TTL decrease only on the first packet (BZ#2088638)
* TC HWOL of inbound traffic over geneve with ovs bridge as VTEP is not working (BZ#2088639)
* Audio No Function on Orchid Bay(Mini Config) (BZ#2090423)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5316" id="RHSA-2022:5316" type="rhsa" title="RHSA-2022:5316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-28915" id="CVE-2020-28915" type="cve" title="CVE-2020-28915"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27666" id="CVE-2022-27666" type="cve" title="CVE-2022-27666"/>
      <reference href="https://bugzilla.redhat.com/1899177" id="1899177" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2061633" id="2061633" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5316.html" id="ALSA-2022:5316" type="self" title="ALSA-2022:5316"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="noarch" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-372.13.1.el8_6.noarch.rpm</filename>
          <sum type="sha256">142958bd83329a6873702becf58ab2847254cfbdc009333da0bbd252fda66bc6</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="noarch" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-doc-4.18.0-372.13.1.el8_6.noarch.rpm</filename>
          <sum type="sha256">1a94261d375b798d2b2dbd304151b6087fa4254c56305bc8d2f7eb71532fcc34</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>bpftool-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1c84e03c1b73755ea09ad25a55b9c58da9dc5b21263656f6adcbf277ba2d2379</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">2ce2e1196a781f2ae5f8157149e2d68ad2f705eaa423f45b871e9063ef01ea89</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-cross-headers-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">31e8618df2d1cd5d2ab89eea939c164bd5946c2c027f3f3a4f2c21d59d33a173</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-debug-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">45dcd0c206ee0a137fae126cd917c21eed29cefc3a7ef9ceeb4ab1e556af62e0</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-tools-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4e329232fabdf41ef7f0be8bc40d245695417c4472a5b217c13d20694bd920ee</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-core-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">75dd9ce6434b1776d479248bb729855b64c3a94cdb1ce3aa9da5f5e35943d415</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-debug-modules-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">821b455e4d0c8f886b1b7510e602e1d1300d62cc57e13331067d72306d2c3dfe</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-modules-extra-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">849b8a0657cc39efa4165c14298112d732818a2945a412118ef42291b60e41bf</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-modules-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8a33f800960171b6cb50447a0d23fd2ad9dfd8306512435db492e7af9d88e0da</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>python3-perf-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9585d40127b37382f585c3b30491578c1c8691be28072cbd83d5ce876d67b565</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-devel-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9942d168a6848d4e2422c57245772f663de4a4f48c2f106d2c4e43c8026ffef9</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-debug-core-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">afcd6e3f21da68238e4bca26e73f814e2b72c369e74dd9431103c2128957e66d</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-debug-modules-extra-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c6738e78e12965eac3f302bfabb673cde6034f22e6f29429360e2f0a8ce7479c</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c8035f3bf359b8d58465e294261bf63b40022738518240ca3c9a8726b6e9d6ba</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c80b2edf17f5247042cf1911be8f3cf4c7b4593e333c7c3cef8f6b6ed0900d13</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>perf-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d5e1eef9745d1270f6573e220c7d88e355d3f72a0455741085bebe5cd0314faa</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.13.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.13.1.el8_6.src.rpm">
          <filename>kernel-debug-devel-4.18.0-372.13.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d81d37c578fe5017319571ab3395076666a8054019491189e22a30f92d297683</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5564</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-07-13 00:00:00"/>
    <updated date="2022-07-21 16:59:44"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for kernel-tools-libs-devel is now available for AlmaLinux 8.</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: race condition in perf_event_open leads to privilege escalation (CVE-2022-1729)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* conntrack entries linger around after test (BZ#2066356)
* Any process performing I/O doesn't fail on degraded LVM RAID and IO process hangs (BZ#2075075)
* fix data corruption caused by dm-integrity (BZ#2082184)
* Backport request of "genirq: use rcu in kstat_irqs_usr()" (BZ#2083308)
* SUT will flash once color screen during boot to OS. (BZ#2083384)
* Kernel Support Fixes for UV5 platform (BZ#2084645)
* i/o on initiator stuck when network is disrupted (4.18.0-372.9.1.el8.x86_64) (BZ#2091078)
* glock deadlock (using the dct tool) (BZ#2092073)
* Recursive locking in gfs2_fault (read/write + mmap) (BZ#2092074)
* 8.6.z backport of "vmxnet3: add support for 32 Tx/Rx queues" from BZ 2083561 (BZ#2094473)
* System freezes with callstack in dmesg: ret_from_fork (BZ#2096305)
* Need some changes in AlmaLinux8.x kernels. (BZ#2096931)
* Bad length in dpctl/dump-flows (BZ#2097796)
Enhancement(s):
* Elkhart Graphics - remove force_probe flag (BZ#2075567)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5564" id="RHSA-2022:5564" type="rhsa" title="RHSA-2022:5564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1729" id="CVE-2022-1729" type="cve" title="CVE-2022-1729"/>
      <reference href="https://bugzilla.redhat.com/2086753" id="2086753" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5564.html" id="ALSA-2022:5564" type="self" title="ALSA-2022:5564"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="kernel-cross-headers" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-cross-headers-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0c0fa8bb03f17c6dbd183e3f0d7ad5378ad61466b554055a2fa7ea3306122686</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>python3-perf-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">16c0548ff321fc9e9d0f29b1222c19d559596de8e07b16a2cbf4ab5768bb399e</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-modules-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">2bca8bcf635ef6d04c92436400a7f8dff4a0727de28be224f530f97116795ccf</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4ec36dc96658e814634031229c2da2112826107204ac97f8cc44b66aa1cb0213</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-debug-modules-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4fa8c2c5279df83454aad2d3855ea81badda048ef46964ed9fd87f96e312a0ea</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="noarch" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-doc-4.18.0-372.16.1.el8_6.noarch.rpm</filename>
          <sum type="sha256">66e7460426bdb78eaec3dde2d66f1d950cbd3398409148bd47457ffc71100559</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-modules-extra-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">67427326f87286b9f8fdf7536a31a0a02c74b093b91f1ba43062ae1888f57620</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-tools-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">683062098e1331c754ea94300603b768da6be1ce6a2a13a6bc17497619957fe7</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-debug-core-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">6f3d1301fcdceedc7c4e1c82360ad7e8d3014fc447d903130dd51f16da5f8f5a</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">810e76c362e01af56770e537adb0549a32afa9995b5bbe9bd7b2c236afe471ee</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>bpftool-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9817858f1d4695d72796614aa2551df6aa2aeb03c4cd4eba666dd8375c4670f4</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-devel-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9d14e5e103037c87a82802b77ae1b685e5209a1cf23a5853b0e0e70818bfb1ff</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ac7e86399f74f4d61ca5a87c81bd8abb9a9d9799422da5bba5b30bdde71ef64d</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>perf-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b38f6ae373321193021245d9b1e143ebcd3f33d2eed86fc8ffbbd1bd6faa697e</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="noarch" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-372.16.1.el8_6.noarch.rpm</filename>
          <sum type="sha256">c16796411eba74a61f64d9a69ed22ce0ad3f98699b028cd880aee02773916046</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-debug-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c69da1ad145a53b738fb1a22ddb9c1292a7e845711e1ea21ed25a134c67b132f</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-core-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">cbbfee4de58aed4fe42dc84138c59d6c6b1637236aad201b80d5a6c3b8c0b2f9</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-debug-modules-extra-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">dcba9625b7a27030b3926b1d8b28fcaabb1e452c421219dc48ce0e38d305f757</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.16.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.16.1.el8_6.src.rpm">
          <filename>kernel-debug-devel-4.18.0-372.16.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">f78c0b0a32c24d6be5e8723cb61a6ecc0f4ec99b0c0286d9a24c14fb1b611a06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5597</id>
    <title>Important: pandoc security update</title>
    <issued date="2022-07-18 00:00:00"/>
    <updated date="2022-07-20 15:01:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for pandoc-common is now available for AlmaLinux 8.</summary>
    <description>Pandoc is a markdown/markup conversion tool. The version of pandoc in AlmaLinux 8 CRB uses cmark-gfm (GitHub's extended version of the C reference implementation of CommonMark) for parts of its conversion. The update, fixes CVE-2022-24724: an integer overflow in cmark-gfm's table row parsing which may lead to heap memory corruption when parsing tables with more than UINT16_MAX columns.
Security Fix(es):
* cmark-gfm: possible RCE due to integer overflow (CVE-2022-24724)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5597" id="RHSA-2022:5597" type="rhsa" title=""/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24724" id="CVE-2022-24724" type="cve" title=""/>
      <reference href="https://bugzilla.redhat.com/2060662" id="2060662" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5597.html" id="ALSA-2022:5597" type="self" title="ALSA-2022:5597"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="pandoc" version="2.0.6" release="6.el8_6" epoch="0" arch="aarch64" src="pandoc-2.0.6-6.el8_6.src.rpm">
          <filename>pandoc-2.0.6-6.el8_6.aarch64.rpm</filename>
          <sum type="sha256">6c5790242c3966687a1a16651f7db0c7c501ce4ca529e611362aceacbbe1a629</sum>
        </package>
        <package name="pandoc-common" version="2.0.6" release="6.el8_6" epoch="0" arch="noarch" src="pandoc-2.0.6-6.el8_6.src.rpm">
          <filename>pandoc-common-2.0.6-6.el8_6.noarch.rpm</filename>
          <sum type="sha256">a3fb4e68ad8d9bdef8259adffa7bf07b188e8b789da3e57bab0dfaed7ceb583d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5683</id>
    <title>Important: java-11-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-21 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-11-openjdk-demo-fastdebug is now available for AlmaLinux 8.</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-11-openjdk (11.0.16.0.8). (BZ#2084649)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-8, openjdk-11] (BZ#2099917)
* Revert to disabling system security properties and FIPS mode support together [almalinux-8, openjdk-11] (BZ#2108248)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-8, openjdk-11] (BZ#2108251)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5683" id="RHSA-2022:5683" type="rhsa" title="RHSA-2022:5683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5683.html" id="ALSA-2022:5683" type="self" title="ALSA-2022:5683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">06ea7d1308ba0ccacd8bfd2807d6aeb916c1d50a63fd29225ed5a7cfb99a9984</sum>
        </package>
        <package name="java-11-openjdk-javadoc-zip" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-javadoc-zip-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0bf3f2b44dc496b781185dabd8e7ad4711e47b1c0ebfc4aac0315843b9536d76</sum>
        </package>
        <package name="java-11-openjdk-static-libs" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1f042941385508ee2458ef18749fb2ad71ff4c1646c5209a74eb8ccc400ebd1b</sum>
        </package>
        <package name="java-11-openjdk-jmods" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">30e20569fb3fcc1badb27dda40306484e97a27ed60d8d34f6104fe6a42e06aad</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3c20c36232210338a1ca4abc0228a89fd20e56cc19cf50cb9bb35fcc1c82b4fd</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">407316c65fc03c9c0751db9b9cdb1bafd8cd662953ff67c1a90abb56e579705d</sum>
        </package>
        <package name="java-11-openjdk" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4cd36c6a066df2c3991c30c46f49f44f2c471cf9809be297d6febf3d94be5ecf</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">53e227d0fcb8e94af1148851b49bebdf439fd95ca12be479d85144db3efe9bb4</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">5eea79e808f16fd9759c1942290bc55b3a19dd23b7c4b1c2a135c5ee6315aefb</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">689d575ceba4d4e32d79e5ddabb2cc42db49c223f1a73fd521bef6942d5e15e2</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">6af69c156c23f125c5d117ec056186fbc33d2b161f456e5fe801036c66b21949</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">6c4b92d6ff6b47c89bc6f42e78b8a39d012638c46798d281931728c298810ff8</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8868ebad0f61112b336c8a8ae8634a34c69db3715353484f408c9317bad98c32</sum>
        </package>
        <package name="java-11-openjdk-src" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-src-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8c19ad48d0f7ecd65f91b6e0fcbc8f1a186dfa7e0bafa85045f932375b69f24c</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9467e6e74bc8a08499affc80eb987fa398f5016d5bab07ce3a5a29148e512e8d</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a758d36dc97e056210f00dd1a300ff8e0d3209d0ab9549a9850d0fd5306a0298</sum>
        </package>
        <package name="java-11-openjdk-demo" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a7eb84dc932ca45e021ae7c5f58417bff4344d5095666fcbe3b99a316bfbaa43</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">bca50f366e8f25a36953f785f97c1b4a947a8aa64a06e8078218122521e8a4cb</sum>
        </package>
        <package name="java-11-openjdk-devel" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c182cb2093a7b479e8f84e8978eb932fae8b68edb1b81f4f6cdcc6e3cefaf5d7</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c43beb8febb1745b3203ac5b6f0af5efc4682af42c2e664be74296476ecf535a</sum>
        </package>
        <package name="java-11-openjdk-javadoc" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-javadoc-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">cfa8b01c084e768b47551e9d7ad3e63e8a06bf0f1608b1e6c2c4a5eac7c06638</sum>
        </package>
        <package name="java-11-openjdk-headless" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d79a06a6c67c77093bd2b1477c81447b28bb1e819bc55a7ff4c72149eb817a97</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.16.0.8" release="1.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.16.0.8-1.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.16.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">fd63ff33fab50e68c7fe748aae9e66d49c5cf089b6a4c2f81e4653ffda49dffb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5696</id>
    <title>Important: java-1.8.0-openjdk security, bug fix, and enhancement update</title>
    <issued date="2022-07-25 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>An update for java-1.8.0-openjdk-accessibility-fastdebug is now available for AlmaLinux 8.</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.
The following packages have been upgraded to a later upstream version: java-1.8.0-openjdk (1.8.0.342.b07). (BZ#2084648)
Security Fix(es):
* OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) (CVE-2022-34169)
* OpenJDK: class compilation issue (Hotspot, 8281859) (CVE-2022-21540)
* OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) (CVE-2022-21541)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* rh1991003 patch breaks sun.security.pkcs11.wrapper.PKCS11.getInstance() [almalinux-8, openjdk-8] (BZ#2099911)
* Revert to disabling system security properties and FIPS mode support together [almalinux-8, openjdk-8] (BZ#2108564)
* SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode [almalinux-8, openjdk-8] (BZ#2108566)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5696" id="RHSA-2022:5696" type="rhsa" title="RHSA-2022:5696"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21540" id="CVE-2022-21540" type="cve" title="CVE-2022-21540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21541" id="CVE-2022-21541" type="cve" title="CVE-2022-21541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34169" id="CVE-2022-34169" type="cve" title="CVE-2022-34169"/>
      <reference href="https://bugzilla.redhat.com/2108540" id="2108540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108543" id="2108543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108554" id="2108554" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5696.html" id="ALSA-2022:5696" type="self" title="ALSA-2022:5696"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">05c32e6f58aa11437d2ddd1c0f49603a2dc0d587b29aa57d63a311b92b751e0f</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">09c960650675d2de87cd50eeeafa4a93c9a2371b67604955408ed0b54db55708</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0e887893d3cf106345bb55563ab07c2ed875e59c1b0170a493eb48f20a62cec5</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc-zip" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-zip-1.8.0.342.b07-2.el8_6.noarch.rpm</filename>
          <sum type="sha256">19fc1dd13fa840eb27749d23ec89a814e8745864badc9860d89e4aff6884060a</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1bac30e21a8aa72c954d0d0fc6472ecbe357a909949ef10e9e3b9aa1f5a1196a</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3b09dadd3bfb207646a21b8b52fd9258eaf95c777ef03e5cb51f0cf7f9f79930</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3b7c19d3f94cfd3d0766103f22c4a05975dcc88f8fec188cc470dc0e03eb71eb</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">41392630841766eed6a86312e04e0e8c1a898bc2459213f721d32d129791cc26</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">465059dbe71b45661aaa25869d087cb6c574d8ffcf7ec5c738d036270255dfc8</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">5ec5b9a59c5a05a6b70de8b84119da0a156e2b7fab01ded62bf41eb967985abf</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">7c035fafa07878740ae93d1e2e1307bd172b2b102a57fa63b7cb0875e79d2266</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9545aa455a743f68ff31a2985b546080e60013815e6bb6cf317d64d745b7d078</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">97215e892d0ab8234693927deaed31bdb6da927b29c270b31fd3dcfafce23e98</sum>
        </package>
        <package name="java-1.8.0-openjdk-javadoc" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="noarch" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-javadoc-1.8.0.342.b07-2.el8_6.noarch.rpm</filename>
          <sum type="sha256">d040221aaa04df913781d3bca1520136a938ce6b0c48f06da8120d2983791098</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d0d6ebc8e65c22d57b1d105d5c0fc9ae239ed5adec179657faeeb5eb71185cc4</sum>
        </package>
        <package name="java-1.8.0-openjdk-src" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d8230dc4144938332f0fa326158fc6ef21f1ab760f2ed872c67f3cc0e3bb9418</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d8bfcba2d25bf1f2643c8b2381ef5bbcf2ac5d59949187fee75c62bc48ac2b95</sum>
        </package>
        <package name="java-1.8.0-openjdk" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">f5dd4ee35a29457cbf063fa35c2613ea8e0bb851e09fe00094e13bbdd6cd05c0</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ffb7fe5878ed5ee3fb05cfa8ebbf79283213f90528b1f181fb36f3edf2b31cc4</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.342.b07" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.342.b07-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.342.b07-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ffbbc6cd2a0013e8e02f1f4aa4acd4c4853e532b2bd63a4443df968fb49428e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5809</id>
    <title>Moderate: pcre2 security update</title>
    <issued date="2022-08-03 00:00:00"/>
    <updated date="2022-08-10 17:46:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pcre2 security update</summary>
    <description>The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. 
Security Fix(es):
* pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c (CVE-2022-1586)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5809" id="RHSA-2022:5809" type="rhsa" title="RHSA-2022:5809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1586" id="CVE-2022-1586" type="cve" title="CVE-2022-1586"/>
      <reference href="https://bugzilla.redhat.com/2077976" id="2077976" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5809.html" id="ALSA-2022:5809" type="self" title="ALSA-2022:5809"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="pcre2" version="10.32" release="3.el8_6" epoch="0" arch="aarch64" src="pcre2-10.32-3.el8_6.src.rpm">
          <filename>pcre2-10.32-3.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0428a49605bb6b3c549cf8d58f1c336a902a48f875e0989de6ff62832f382930</sum>
        </package>
        <package name="pcre2-devel" version="10.32" release="3.el8_6" epoch="0" arch="aarch64" src="pcre2-10.32-3.el8_6.src.rpm">
          <filename>pcre2-devel-10.32-3.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3ecc571c24f48236cee64df63b53ca927ab0a3c0756b85d3cd64e4dc5c49ff1a</sum>
        </package>
        <package name="pcre2-utf16" version="10.32" release="3.el8_6" epoch="0" arch="aarch64" src="pcre2-10.32-3.el8_6.src.rpm">
          <filename>pcre2-utf16-10.32-3.el8_6.aarch64.rpm</filename>
          <sum type="sha256">98d179c79c1342ba288cda410e579de2cb22b24758c60b056006c844fd460df3</sum>
        </package>
        <package name="pcre2-utf32" version="10.32" release="3.el8_6" epoch="0" arch="aarch64" src="pcre2-10.32-3.el8_6.src.rpm">
          <filename>pcre2-utf32-10.32-3.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b1b0bc882188218a5b1ce4ed84d2d1d2ce7b70f64cbb9785b684bb5b8252145e</sum>
        </package>
        <package name="pcre2-tools" version="10.32" release="3.el8_6" epoch="0" arch="aarch64" src="pcre2-10.32-3.el8_6.src.rpm">
          <filename>pcre2-tools-10.32-3.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b83f2a769ae327ac73de2b794070bec2b48add10aae48556a9980274ce20eb73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5819</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2022-08-03 00:00:00"/>
    <updated date="2022-08-10 17:51:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak (CVE-2022-1012)
* kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root (CVE-2022-32250)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Softirq hrtimers are being placed on the per-CPU softirq clocks on isolcpu’s. (BZ#2090484)
* enable/disable multiqueues repeatedly while ping local host, guest kernel panic (BZ#2093416)
* Backport kernel audit enhancements and fixes from v5.13-rc1 to v5.16-rc6 (BZ#2095434)
* blk_update_request: I/O error, dev nvme0n3, during xfs creation (BZ#2100150)
* SCSI updates for AlmaLinux 8.7 (BZ#2100254)
* Kernel bug on mm/slub.c:314 (BZ#2102251)
* Implement new tc action for check_pkt_len (BZ#2102333)
* too long timeout value with TIME_WAIT status of conntrack entry (BZ#2104002)
* Connectx6-DX, mlx5 , backport   087032ee7021 ("net/mlx5e: TC, Fix ct_clear overwriting ct action metadata") (BZ#2104012)
* mlx5: Software steering memory allocation failure, netperf  TCP_CRR with ct(). (BZ#2104013)
* tcp: request_sock leak in Calico OCP (BZ#2104670)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5819" id="RHSA-2022:5819" type="rhsa" title="RHSA-2022:5819"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1012" id="CVE-2022-1012" type="cve" title="CVE-2022-1012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32250" id="CVE-2022-32250" type="cve" title="CVE-2022-32250"/>
      <reference href="https://bugzilla.redhat.com/2064604" id="2064604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2092427" id="2092427" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5819.html" id="ALSA-2022:5819" type="self" title="ALSA-2022:5819"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">059665331c2bd938e9124ec42cb5448d2f73c98c1c73bbe87e476eb8ad092ca0</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-devel-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1ade627e1e96902f4364108db0a080e758587d7aac9a0d2b81c5be5204299205</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4078c10ac73512fd4ff10099319cc3062ab59f009efd1eda23d5c8a3b59b58bd</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-modules-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4157ae206e012ec54a50995101371f1c64a839cce05d5ba27f825b3da1961744</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-headers-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">49d4946b12bbe007963b0f15f8dc8dd6bc24f73597e1902f9b082242324677f9</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-tools-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">55b9dde59970dab48134691a37159ecdf1da8975d413a075f5ccd951a73e19a3</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>python3-perf-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">703ee9cb970b9c147bd79f3b3a935cb3a1560246e361db530c301aafe659f956</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-debug-modules-extra-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">7684a6d4c1dd19a163d65994fa44da8f8f3e0eead3baf4048cd853c3100ae386</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-debug-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">7fd0954956e5b8280982ce18d35623a62fa8f327f22a8eee73a9688ba768241b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">86dace47f24444e5318fb0878508cc7789566e34fa8b96bbedd65ccbfe97a4e4</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>perf-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">877691a06200e0b8522fb01e58530a09a8ae4a1a0b7cad754819ba8b5ea078ba</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-debug-core-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8bd1a8660252d795026cb33febee6628fefdf6f476f9f1bfba9a9d13f0607528</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>bpftool-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">9fa25fd7caae641c3172e33992e529fd6ce18d6a6a28103901b3eca76eac6d2c</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="noarch" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-doc-4.18.0-372.19.1.el8_6.noarch.rpm</filename>
          <sum type="sha256">a672dfad00b875163cd5220f45016db5253f4220cb4bd87793ddf1688c6393f4</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-core-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">aa2b69b203bea656844a5a683e59eea4dcd3ab512c832b66d5a98ee761e62a80</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-debug-modules-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">b486752f785356585c68737486984a50d21ca77da9ca79b455055cc86c6d5e46</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-debug-devel-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">bc132085faae80accddad6789e621a945fd5c200e706ddf84f6ec13c21d5d5a3</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-modules-extra-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c79a1f05b1d0087c2fd43f37a8c4b96884e8aa8622adea31fee22ba7786e51c1</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="noarch" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-abi-stablelists-4.18.0-372.19.1.el8_6.noarch.rpm</filename>
          <sum type="sha256">d3688d03d1a3b1ac04f1ac2e48d7d0270d80d21017e82233ff515bbecc6d068c</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.19.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.19.1.el8_6.src.rpm">
          <filename>kernel-cross-headers-4.18.0-372.19.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">e30a9b1dfecf1fe83e07ce1db222bf771495bd207f7baa67624904d652367478</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:5821</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2022-08-02 00:00:00"/>
    <updated date="2022-08-05 15:20:34"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.
Security Fix(es):
* QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow (CVE-2021-4206)
* QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow (CVE-2021-4207)
* QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353)
* QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* AlmaLinux 9.0 guest with vsock device migration failed from AlmaLinux 9.0 &gt; AlmaLinux 8.6 (BZ#2071103)
* Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs) (BZ#2072242)
* Remove upstream-only devices from the qemu-kvm binary (BZ#2077928)
* When doing a cpu-baseline between skylake and cascadelake, cascadelake is selected as baseline. (BZ#2084030)
* Virt-v2v can't convert rhel8.6 guest from VMware on rhel8.6 (BZ#2093415)
Enhancement(s):
* Allow memory prealloc from multiple threads (BZ#2075569)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:5821" id="RHSA-2022:5821" type="rhsa" title="RHSA-2022:5821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4206" id="CVE-2021-4206" type="cve" title="CVE-2021-4206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4207" id="CVE-2021-4207" type="cve" title="CVE-2021-4207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26353" id="CVE-2022-26353" type="cve" title="CVE-2022-26353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26354" id="CVE-2022-26354" type="cve" title="CVE-2022-26354"/>
      <reference href="https://bugzilla.redhat.com/2036966" id="2036966" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2036998" id="2036998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2063197" id="2063197" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2063257" id="2063257" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-5821.html" id="ALSA-2022:5821" type="self" title="ALSA-2022:5821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="aarch64"/>
        <package name="libnbd-bash-completion" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libnbd-bash-completion-1.6.0-5.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">04261c29bb296eb9a75529ccf38f2cf0059e4537d8911980c2993cd607ac46fa</sum>
        </package>
        <package name="libguestfs-javadoc" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-javadoc-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">0462872e1d87034335e6d11a6e3a48cf0d3f04e763db0674189145bd2e8b1132</sum>
        </package>
        <package name="libvirt-wireshark" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-wireshark-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">086922822f9552744d6a23a5de7b30f32d456bd518ff94784ea9f71058c1357f</sum>
        </package>
        <package name="nbdkit-xz-filter" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-xz-filter-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">090f8533c6ee1d816f1f722738200b56ed657ce8d6d72e2a2580c5454848a5e8</sum>
        </package>
        <package name="qemu-img" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-img-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">09e4839c051b50966afac4a6d15c6deafe567389bde571f855063389eaaf6d1f</sum>
        </package>
        <package name="netcf-libs" version="0.2.8" release="12.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>netcf-libs-0.2.8-12.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">0bcaf5d8e5f17815e1295651458c4f429ff9fccadbfe7b2f3c23b784efee47c1</sum>
        </package>
        <package name="qemu-kvm-block-rbd" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-block-rbd-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">11956e76258d268a8117bf4806eda78f4f8d80657c80b64fb6ba06b43ad7a11f</sum>
        </package>
        <package name="python3-libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>python3-libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">17c52283878044dd6fe5929028e7acf1334150b5bd429dea2edcb4533a19b451</sum>
        </package>
        <package name="swtpm-libs" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-libs-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">17d165a114df6d9c87f5474a8ef4a6cc8989be6fd6448cb5a7f478b5060f9474</sum>
        </package>
        <package name="libguestfs-bash-completion" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-bash-completion-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">1d38905a874bcc69a182c689ccb07febbd3da0ab4a0ec210e4aacf155191cf90</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-gluster" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-gluster-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">1d85cf6cfa7974f961b4051308e429cb60c91ec1989428952597d4a69de32e43</sum>
        </package>
        <package name="qemu-kvm-block-ssh" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-block-ssh-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">1ec23aa4e885404c79b74a9b4d77270703ad017beb00f392724741c69432c6a0</sum>
        </package>
        <package name="python3-libvirt" version="8.0.0" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-python-8.0.0-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>python3-libvirt-8.0.0-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">201b8b06252415e23158f084ce1623580a2a422e79e7fd7c6700037ff7bb460f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">27f1c2f4ccbcae75aaceaa10518c05729bdf6e4ea959963d60c0d82fd7a7eefa</sum>
        </package>
        <package name="libguestfs-xfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-xfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">28cd4f60c0b0c6a80e2c0565c2be934d689668531b9561e31b623e3dc40f5c79</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">2d9e77c5bc226a472ee5b46e85174a22b1f3959cfc7aa3112df00b1fce115947</sum>
        </package>
        <package name="libvirt-daemon-driver-nodedev" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-nodedev-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">2f744f82697986393556408a84a3db1e57189a2779afcb3ab7b78c7491b697da</sum>
        </package>
        <package name="python3-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>python3-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">3233b84340378bd9995f4ebb93772164fa6bf22b09e16c91675a2cefc5e36096</sum>
        </package>
        <package name="libguestfs-winsupport" version="8.6" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libguestfs-winsupport-8.6-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libguestfs-winsupport-8.6-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">3451d898dcef6fd8eba7084a2cb9a46e4e5dc7ae6ebf087bd3fd43f5409cb370</sum>
        </package>
        <package name="libguestfs-gobject" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-gobject-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">376f48832703d3e8db6d8bc8ccd0fbe42d122a8f34f5721796a3ec7ee80e530f</sum>
        </package>
        <package name="ruby-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ruby-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">37916087ec0b79b843c0b0ed6e94824c91444feb5caba41905a0a63d0b1ff384</sum>
        </package>
        <package name="libguestfs-tools-c" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-tools-c-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">392cbcdcad2246af1833e7e11e75403e58a0de12af22d0242fa5cf401377610e</sum>
        </package>
        <package name="libguestfs-man-pages-ja" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-man-pages-ja-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">40b82b2ed38af4d46da4de59be160307caba980b53dbe4a58c96d6da3c424421</sum>
        </package>
        <package name="libiscsi-utils" version="1.18.0" release="8.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libiscsi-utils-1.18.0-8.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">475718b68490ef173aef57f3aa680f5862a6799ade88eacbaf51738aed5af001</sum>
        </package>
        <package name="nbdfuse" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdfuse-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">4797cbeabad4a6e34bfc69a30b52b8267cf89373964f6751c7e51e6fef8446ce</sum>
        </package>
        <package name="hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">48ba556391893b813b8b00ca6850c883070f0d01e9ebf7ff480af5510d35adcb</sum>
        </package>
        <package name="perl-Sys-Guestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>perl-Sys-Guestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">4920f1651385ebc8a54bbb1f0b22f12e5f18dbfa2604d8aef87c885126cb2725</sum>
        </package>
        <package name="qemu-kvm-docs" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-docs-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">4978914867e432707b91984563388c270f218ec511784b8508c9d5e103d5acef</sum>
        </package>
        <package name="perl-Sys-Virt" version="8.0.0" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="perl-Sys-Virt-8.0.0-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>perl-Sys-Virt-8.0.0-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">49b9715349f358cca7706cf7272a54e49466e7cca487afceb1eecb61e576f7f3</sum>
        </package>
        <package name="libvirt-daemon-config-network" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-config-network-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">4a6c37b2d6f0ec76db68dce0789f046eab3d7f8ae938b9d64e7cb099dd82b60f</sum>
        </package>
        <package name="libguestfs-man-pages-uk" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-man-pages-uk-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">4bf299e6e0e6ad536b963747c4f9f255a4978cad6ae6b7fb95576cb36fd83ad7</sum>
        </package>
        <package name="virt-v2v-man-pages-ja" version="1.42.0" release="19.module_el8.6.0+3071+a07c0ea5" epoch="1" arch="noarch" src="virt-v2v-1.42.0-19.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>virt-v2v-man-pages-ja-1.42.0-19.module_el8.6.0+3071+a07c0ea5.noarch.rpm</filename>
          <sum type="sha256">503e8d2ec6ba05aa0cf8090cb207a3f7b8761cedf55e429602964dd77aead9a8</sum>
        </package>
        <package name="qemu-guest-agent" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-guest-agent-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">5176d0d5ec3742a74f3428373cd95cdefe35009c00ebc70397d96652c91a397f</sum>
        </package>
        <package name="nbdkit-nbd-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-nbd-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">5414e8767303cf3da31c99da97e72f7a408b8d835b95b6e2c44d394064bcdf57</sum>
        </package>
        <package name="libvirt" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">543d18414e0388b08a2ca558a8842d4bed498e44b26c10dd7a0e7d885858ce38</sum>
        </package>
        <package name="SLOF" version="20210217" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="SLOF-20210217-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>SLOF-20210217-1.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">566330deb9430a272cc9e194f24bdd9a491f9ee223e54a2f9577b4e1d72092c9</sum>
        </package>
        <package name="supermin-devel" version="5.2.1" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="supermin-5.2.1-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>supermin-devel-5.2.1-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">56ae47acbc529be1914868d608a30a4d451786bc44331b18260c887336cbc55f</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">587aad9a08517f25d1f8f846e92834c0689f13148b8a82ab7e5b30dc38f01a7b</sum>
        </package>
        <package name="lua-guestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>lua-guestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">5ccf38495ab41685739093d792b7d361f92c2a843d8296a0900e0e25a63499c2</sum>
        </package>
        <package name="libvirt-daemon" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">5d871585d7a10709f922e72c513074408e8d8d8a4d5b8dfe4635c8ebbaf893db</sum>
        </package>
        <package name="qemu-kvm-core" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-core-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">5e8537efc3e4247247d21d24d8dc828f7ead754f91c19096252b22077f761745</sum>
        </package>
        <package name="libvirt-devel" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-devel-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">61e92db6397b1916bc996dd806759f424db76324d128ad2a0d841d3233249a43</sum>
        </package>
        <package name="netcf" version="0.2.8" release="12.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">622166df6272f067ff22fb348eae9e5c6b899d029f6fb40d2b259456d70110d8</sum>
        </package>
        <package name="swtpm" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">6242158c009720f0291eb7b197d0d035ef4aabf6909e3b12ac96e7591e287f0f</sum>
        </package>
        <package name="sgabios-bin" version="0.20170427git" release="3.module_el8.6.0+2880+7d9e3703" epoch="1" arch="noarch" src="sgabios-0.20170427git-3.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>sgabios-bin-0.20170427git-3.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">62a8a51a41f340146cc418ee91d9f48909327024150c0976e94a9cd537b2227f</sum>
        </package>
        <package name="virt-v2v-bash-completion" version="1.42.0" release="19.module_el8.6.0+3071+a07c0ea5" epoch="1" arch="noarch" src="virt-v2v-1.42.0-19.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>virt-v2v-bash-completion-1.42.0-19.module_el8.6.0+3071+a07c0ea5.noarch.rpm</filename>
          <sum type="sha256">6637a6a8ae48613defd82dee1b9ac68659b17e626fb3e6cf18209e60293ba82b</sum>
        </package>
        <package name="nbdkit-bash-completion" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-bash-completion-1.24.0-4.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">66d9a4677289c743b2c2368344e57c3ba6971355281e1c73591ce0d9d7d579c4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-disk-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">68e15cbe38b0ea86b79ea7bc6cdb2a4d6db15bd539488ebadb8a65aa6eadf1cd</sum>
        </package>
        <package name="libtpms-devel" version="0.9.1" release="0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libtpms-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libtpms-devel-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">69553b5ccdf7b75c3296aa0ed6a0907431fe5f3fbf9ed6998123ac51986505df</sum>
        </package>
        <package name="nbdkit-ssh-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-ssh-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">6decf4eeefa3962492aa70c47e2a31ad9204916d3467ee975025d8cb1e108025</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">6e629f8f1195f9483d8f4b8b9e0500f7e48cab8fd8d07078e32f16f3bbd686a3</sum>
        </package>
        <package name="hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">6f240411b8eebc0411ab84fb52f7fffad23c4ef27b4201067167415ac4cfc9ae</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">70af0b572d8ba85daa1f61fc261d7860ae8eccfa9d5667e3bbb786f761061990</sum>
        </package>
        <package name="libvirt-daemon-kvm" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-kvm-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">71cd49732fc654bc10a63bd22fefb85093dae5d1769bc3bbf65f242f6bf1da3f</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-kvm-block-iscsi" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-block-iscsi-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">7697d1bd15cf5ce582e35ecb123cc33254faf847fd0961736977101c97e20fd5</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">78509697eed6b536c18984fce9b4593e009428a9071c515ffc63d7c33974399d</sum>
        </package>
        <package name="libguestfs-java-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-java-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">789be34f81846b92e83207a3f638f563729b45476bf40581d25c92aba55c41e5</sum>
        </package>
        <package name="libvirt-dbus" version="1.3.0" release="2.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libvirt-dbus-1.3.0-2.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libvirt-dbus-1.3.0-2.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7bd28a649f56f3823e2cf3f6ac920ba389e4eaba1adad666059332b3564421ef</sum>
        </package>
        <package name="nbdkit-tmpdisk-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-tmpdisk-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7bfa0f914c22d17a9ecf18b7629c980fdcf79e261942a2d003a815fde6c5d036</sum>
        </package>
        <package name="nbdkit-devel" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-devel-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">7df178225415143ca9ad6d6ca6f2950024c3958d4bf7f3609497a9b3933183ec</sum>
        </package>
        <package name="nbdkit-example-plugins" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-example-plugins-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">80cc8041828d0961d5a627d4645a6de764b5b79d4cf95c6bd547230b8c0104c3</sum>
        </package>
        <package name="libguestfs-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">8143dbe16e23d80fa50b9bea67640cb7e7733faebc015d7435a8824107116fd7</sum>
        </package>
        <package name="libguestfs-inspect-icons" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-inspect-icons-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">8249e79e9962e7b43ccbfd0650b590fabdec824319c3fa286582f35bf44b384d</sum>
        </package>
        <package name="nbdkit-curl-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-curl-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">8472f09cd3c58178a2f709440560f0dafe65d9c881cab64570fc9685a40d53ea</sum>
        </package>
        <package name="seavgabios-bin" version="1.15.0" release="2.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="seabios-1.15.0-2.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>seavgabios-bin-1.15.0-2.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">86f6a0786771a35c1924490497000089bffec65655053c2e6994d4555adb7a9b</sum>
        </package>
        <package name="libguestfs-rescue" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-rescue-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">8cc48315c47b39a89b32e4bfa2737ff23ba8d8805c5b31c65766590ee0f46ef3</sum>
        </package>
        <package name="libvirt-client" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-client-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">964e2434a567c61ed7965e9a6bf71663625d6a27f12bcad7c56b8523baf0624e</sum>
        </package>
        <package name="nbdkit-gzip-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-gzip-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">982eb434870d6d7396d6b4d091f87397f844af415820365956777d83ba25c372</sum>
        </package>
        <package name="libguestfs-rsync" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-rsync-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">9b27b33216ccbe91fcb1f058087cd03c702637ad2fbd9931ec9a250765f70dea</sum>
        </package>
        <package name="libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">9e9a8988587603186e95cac997834f8cca157a712ac377054df0be3e1d4d0e28</sum>
        </package>
        <package name="libvirt-daemon-driver-network" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-network-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">a1ac6ebe8bf26856f5692b84261fb6d4c13072273f9d0788b1970b6ae7d5356d</sum>
        </package>
        <package name="qemu-kvm" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">a2cca07b2aa01cbbc74ce15ba2a873a1c0c4ab3f70ca4852a7d69144059d4e82</sum>
        </package>
        <package name="libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">a54b75d4a322deed28dad5597ea17a1cd310f64248e8fad03703e64657f734ef</sum>
        </package>
        <package name="python3-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>python3-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">a6c683af91f3fc4daf701dbc6e5848b224c7cf1a8ca79b9666f926b43824309c</sum>
        </package>
        <package name="nbdkit-tar-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-tar-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">ac74890816673ecfe965f37822e88d05d47bc1148a2c6319ecd528015344a25f</sum>
        </package>
        <package name="ruby-libguestfs" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>ruby-libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">b09bf9016c244fccf38ac373c725e20e0c6e676f1f2f062c914b05c1e9674aa9</sum>
        </package>
        <package name="nbdkit-basic-filters" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-basic-filters-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b16cb0191955c3f8149e18c2697ea9b4492db83535cd47ffded9fa19e65fba6f</sum>
        </package>
        <package name="nbdkit-python-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-python-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b27988464dce96b01b60d4e634d9093d906fd271393a35254980bc81f1b93a62</sum>
        </package>
        <package name="libvirt-nss" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-nss-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">b49d49549e5aa958694c2a8d24a4e955626c4104a5ca652b70867f377cf26f10</sum>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-nwfilter-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">b85e5bd34bf72ea621e73472dec71e7e61e3af0e90889d129a47c7a924c005be</sum>
        </package>
        <package name="netcf-devel" version="0.2.8" release="12.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="netcf-0.2.8-12.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>netcf-devel-0.2.8-12.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">b94dbcf9abf28d020816edcf78b874b8a4fb7cce37a822457f4d9fe4efdc33bf</sum>
        </package>
        <package name="virt-dib" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>virt-dib-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">b967db9489ae1f848508850f23d5083c4890fe0a01b9a7181af2009acbdeb6e7</sum>
        </package>
        <package name="libvirt-docs" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-docs-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">b994067e03e0f13af239c29c927d502efe113b6e02de087d2c56e7e2b6bb4978</sum>
        </package>
        <package name="swtpm-tools" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-tools-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bce4f360f69f729855d4a6e19e1742bba80b61c781584818adba5b873899b496</sum>
        </package>
        <package name="libvirt-daemon-config-nwfilter" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-config-nwfilter-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">bdfb70104919535f4cfbd882cf632b63694f2e94226ca01810356a280a811a36</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">c305aa6bcd1eb17cb9f6f2d1264dae9b0a3642f7cb4498ac302afbc26a66bfa4</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-logical-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">c339ab79552ed834f1f5e04e90af8b94416b8c7be982343e48b9330c8431a5f2</sum>
        </package>
        <package name="qemu-kvm-common" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-common-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">c3ce9d6eba1a4fcf4dccf1e5e220db52911c8ced6d1c580febe3479062c1e060</sum>
        </package>
        <package name="nbdkit-basic-plugins" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-basic-plugins-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">c3db920ca84f7adea7d71c8b7a3d1c23dc93de7e0527f8d543d2cc871091d6a9</sum>
        </package>
        <package name="libvirt-daemon-driver-interface" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-interface-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">c4355fd00ed5c5f0e94fc023890af521d024135e47adc68cc94d16484bd479f3</sum>
        </package>
        <package name="libtpms" version="0.9.1" release="0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libtpms-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libtpms-0.9.1-0.20211126git1ff6fe1f43.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cb380fab5dd9c4fdb8e53ab14bc02575e1c53ab4f644e3fbae25643f9e57e82b</sum>
        </package>
        <package name="libguestfs-gobject-devel" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-gobject-devel-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">cb3d6fe4c986cb49a8876cbe4d1614cd35f9a22b5c6f07c9f85e4837f3011d60</sum>
        </package>
        <package name="libguestfs-gfs2" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-gfs2-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">cc9f99845e8844803e18293558345d981bf9ae250c6a37abe38963cfbf89b6d8</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="nbdkit-gzip-filter" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-gzip-filter-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d0c6573cd68feda3b83b05186417ca32eae582b2d8fd1e3ee14afa7a61d7682c</sum>
        </package>
        <package name="nbdkit-tar-filter" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-tar-filter-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d1113d451ca409d7133eed06db426f84acc960dd3f2e4588aedee48105c99e83</sum>
        </package>
        <package name="libguestfs-appliance" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-appliance-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">d121e460d041f115bb8c0d5ff148ffd0402a800717aa1530bbc987216bd3b40a</sum>
        </package>
        <package name="qemu-kvm-block-curl" version="6.2.0" release="11.module_el8.6.0+3071+a07c0ea5.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.src.rpm">
          <filename>qemu-kvm-block-curl-6.2.0-11.module_el8.6.0+3071+a07c0ea5.2.aarch64.rpm</filename>
          <sum type="sha256">d2a54ac93a526a2486802d58a0911b7603a9bbf89af44bf82b84abae2d1eb918</sum>
        </package>
        <package name="swtpm-tools-pkcs11" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-tools-pkcs11-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d33ecb889834fd50c82ff338660b0dfeac071e9ad1605ee1c95578afbc44c162</sum>
        </package>
        <package name="libvirt-libs" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-libs-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">d582e17173723cf98e18dd4f497718083afcef333be80662eaf13cecc22602fa</sum>
        </package>
        <package name="libvirt-daemon-driver-secret" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-secret-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">d92eb8309923974beb72b8443e29c66bee5aa747b1cf8455cfd4a857f9a71fc1</sum>
        </package>
        <package name="perl-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>perl-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">d9bb15759f890771331c1288c5562a12e10e7c4089eded1041b83da66bf948f2</sum>
        </package>
        <package name="seabios-bin" version="1.15.0" release="2.module_el8.6.0+2880+7d9e3703" epoch="0" arch="noarch" src="seabios-1.15.0-2.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>seabios-bin-1.15.0-2.module_el8.6.0+2880+7d9e3703.noarch.rpm</filename>
          <sum type="sha256">da8e1a9c53240df93cae4e3cfa4cbd35b8a1751a77c05c0a2afb76937db51681</sum>
        </package>
        <package name="nbdkit-linuxdisk-plugin" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-linuxdisk-plugin-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">dbbd8330d76f3d9d4375299c1b57cb86fe6e9b9f6578073beb0216d714884bf4</sum>
        </package>
        <package name="libvirt-lock-sanlock" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-lock-sanlock-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">dda185df257b167f60f72481c1482193a51102f092e82d03e440a9d6d6983308</sum>
        </package>
        <package name="libvirt-daemon-driver-qemu" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-qemu-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">dedccb98decf04e640f1a48beaf7eaf21ec9eb6b7eda3dd8baa73c15b8eec501</sum>
        </package>
        <package name="libguestfs-tools" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="noarch" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-tools-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.noarch.rpm</filename>
          <sum type="sha256">e0289f6636915b5f0c3d3d2bc9354aa9bd4655a36ce68596f9e6f2122fb0ae7d</sum>
        </package>
        <package name="libguestfs-java" version="1.44.0" release="5.module_el8.6.0+2880+7d9e3703.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.src.rpm">
          <filename>libguestfs-java-1.44.0-5.module_el8.6.0+2880+7d9e3703.alma.aarch64.rpm</filename>
          <sum type="sha256">e03c8f7de90b9ddd422c66c2794d9df69670304a2bbc8abc2514c7a6ea4f7333</sum>
        </package>
        <package name="swtpm-devel" version="0.7.0" release="1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="swtpm-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>swtpm-devel-0.7.0-1.20211109gitb79fd91.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">e187939de1289b8590381ba36bf897441cdb504137fca4ed365623d8a0036137</sum>
        </package>
        <package name="libiscsi" version="1.18.0" release="8.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">e6aabc36bca82477806e4d9cca5d92d6951021e58146a289170083bd53156e4b</sum>
        </package>
        <package name="virt-v2v-man-pages-uk" version="1.42.0" release="19.module_el8.6.0+3071+a07c0ea5" epoch="1" arch="noarch" src="virt-v2v-1.42.0-19.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>virt-v2v-man-pages-uk-1.42.0-19.module_el8.6.0+3071+a07c0ea5.noarch.rpm</filename>
          <sum type="sha256">f08b407022a09a14d2e7315879dc93f8b54ca7b82f331354d5d81235e08ff7cd</sum>
        </package>
        <package name="supermin" version="5.2.1" release="1.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="supermin-5.2.1-1.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>supermin-5.2.1-1.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f10363a3760a238e8b068825bd41199ecf5f09e9ad66b017438872c7054c0b89</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">f2d0bbfa9b400a446331af7e93d094751120064b8124216ceb87d17127c9ba78</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
        <package name="libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f767d0372dc97eed0ad2bbbbb937776a997ec91e7c97017bc4209a8497cf0fee</sum>
        </package>
        <package name="libiscsi-devel" version="1.18.0" release="8.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libiscsi-1.18.0-8.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>libiscsi-devel-1.18.0-8.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f7772d478351f5bfc0421cc6fa02eb1d4f552a9723fad5327390b33a6d511477</sum>
        </package>
        <package name="nbdkit" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f7c90fe5a8372a07b7834abbe7749cbc237ccf1189507137a82430e1731bbafc</sum>
        </package>
        <package name="libvirt-daemon-driver-storage-core" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-core-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">f887059a73c4c1ecfdc65618f3f43ff4a5fb22b749288accc58c6f13d9180f96</sum>
        </package>
        <package name="nbdkit-server" version="1.24.0" release="4.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="nbdkit-1.24.0-4.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>nbdkit-server-1.24.0-4.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">fc2d247327593075e2cc7ec8aa0cc0d2766c160118cb217465e4a27374cdf73c</sum>
        </package>
        <package name="libvirt-daemon-driver-storage" version="8.0.0" release="5.2.module_el8.6.0+3071+a07c0ea5" epoch="0" arch="aarch64" src="libvirt-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.src.rpm">
          <filename>libvirt-daemon-driver-storage-8.0.0-5.2.module_el8.6.0+3071+a07c0ea5.aarch64.rpm</filename>
          <sum type="sha256">fd90218e87c9d616e8198f6864c93e0e4711401418387722536f60a187d8ab5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6058</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2022-08-15 00:00:00"/>
    <updated date="2022-08-17 10:57:40"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.
Security Fix(es):
* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6058" id="RHSA-2022:6058" type="rhsa" title="RHSA-2022:6058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-34716" id="CVE-2022-34716" type="cve" title="CVE-2022-34716"/>
      <reference href="https://bugzilla.redhat.com/2115183" id="2115183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6058.html" id="ALSA-2022:6058" type="self" title="ALSA-2022:6058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="aspnetcore-runtime-6.0" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>aspnetcore-runtime-6.0-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">0af456074f940fd56172055add0f4e3d6330aa5bdeaeb40fb84ccfc45ec7088b</sum>
        </package>
        <package name="dotnet-host" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-host-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1fb204ab1093eb348cc44002c39584f85a787790da4cf07bfb76a68348dbaf32</sum>
        </package>
        <package name="dotnet-hostfxr-6.0" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-hostfxr-6.0-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">28d0fc7cedd566e3166c7849a6a8e1e9f68877d94bff1ce7131a298dcdd76f72</sum>
        </package>
        <package name="dotnet-sdk-6.0" version="6.0.108" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-6.0.108-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4e29b85c84133fafe42b6748e960a7bcfdc6e878d2418d730fb6f976424fa84c</sum>
        </package>
        <package name="dotnet-targeting-pack-6.0" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-targeting-pack-6.0-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">56b4541f8c91e74f01cfa039caede028165dc8eaac6bf7ab1424b17891615d6d</sum>
        </package>
        <package name="netstandard-targeting-pack-2.1" version="6.0.108" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>netstandard-targeting-pack-2.1-6.0.108-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8e910986dc686553f446778d80fcf3a8fe052b93b6f28696e9e3b46f8a2b811a</sum>
        </package>
        <package name="dotnet-apphost-pack-6.0" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-apphost-pack-6.0-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">cee5d8cefe6ae7a2d40a5a9be8e4892c5c4a666af9ad1a2f273bf85a910ac9dd</sum>
        </package>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.108" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.108-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d26dec17ff34f9ea4f40432d37874751d61b0b622047d08816dbe8a87b9d0740</sum>
        </package>
        <package name="dotnet-runtime-6.0" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-runtime-6.0-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d6c2082b99994c9338ba917c0d60ada62547a63f7da1a3517db678875d6ff1a2</sum>
        </package>
        <package name="dotnet" version="6.0.108" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-6.0.108-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">e5c7f189b722ac703c02db7c25aa2b81f89e39a6c9669d77256c238716b7b877</sum>
        </package>
        <package name="aspnetcore-targeting-pack-6.0" version="6.0.8" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>aspnetcore-targeting-pack-6.0-6.0.8-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ed540d65088654f8018c263652940d4c71a58c03254aeac9ce2f0ba90433a2f5</sum>
        </package>
        <package name="dotnet-templates-6.0" version="6.0.108" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.108-1.el8_6.src.rpm">
          <filename>dotnet-templates-6.0-6.0.108-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ff1edca8db6d41e5cfb1a894e58f5ad41d2e73638d0599e504ce7c334039ba0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6460</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-09-13 00:00:00"/>
    <updated date="2022-10-13 10:54:09"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* Incomplete cleanup of multi-core shared buffers (aka SBDR) (CVE-2022-21123)
* Incomplete cleanup of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125)
* Incomplete cleanup in specific special register write operations (aka DRPW) (CVE-2022-21166)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Bad page state in process qemu-kvm  pfn:68a74600 (BZ#2081013)
* slub corruption during  LPM of hnv interface (BZ#2081250)
* Affinity broken due to vector space exhaustion (BZ#2084646)
* 'rmmod pmt_telemetry' panics on ADL-P IOTG (BZ#2091079)
* Unable to boot AlmaLinux-8.6 on Brazos max. config (Install is success) (BZ#2092241)
* kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095654)
* mt7921: free resources on pci_probe error path (BZ#2101684)
* NLM should be more defensive if underlying FS changes fl_owner (BZ#2102099)
* AlmaLinux8/async-pf Guest call trace when reboot after postcopy migration with high stress workload (BZ#2105340)
* execve exit tracepoint not called (BZ#2106662)
* QProcess dead lock on kernel-4.18.0-358 (BZ#2107643)
* KVM fix guest FPU uABI size to kvm_xsave (BZ#2107652)
* KVM selftests fail to compile (BZ#2107655)
* Some monitor have no display with AMD W6400 when boot into OS. (BZ#2109826)
* Percpu counter usage is gradually getting increasing during podman container recreation. (BZ#2110039)
* multipath failed to recover after EEH hit on flavafish adapter on Denali(qla2xxx/flavafish/AlmaLinux8.6/Denali) (BZ#2110768)
* soft lockups under heavy I/O load to ahci connected SSDs (BZ#2110772)
* trouble re-assigning MACs to VFs, ice stricter than other drivers (BZ#2111936)
* Intel MPI 2019.0 - mpirun stuck on latest kernel (BZ#2112030)
* Multicast packets are not received by all VFs on the same port even though they have the same VLAN (BZ#2117026)
* Hyper-V 2019 Dynamic Memory Problem hv_balloon (BZ#2117050)
* kernel BUG at kernel/sched/deadline.c:1561! (BZ#2117410)
* ALSA (sound) driver - update Intel SOF kcontrol code (BZ#2117732)
* bridge over bond over ice ports has no connection (BZ#2118580)
* Fix max VLANs available for VF (BZ#2118581)
* offline selftest failed (BZ#2118582)
* INTEL NVMUpdate utility ver 3.20 is failing to update firmware on E810-XXVDA4T (WPC) (BZ#2118583)
* VM configured with failover interface will coredump after been migrating from source host to target host(only iavf driver) (BZ#2118705)
* Fix max VLANs available for untrusted VF (BZ#2118707)
* Softlockup on infinite loop in task_get_css() for a CSS_DYING cpuset (BZ#2120776)

Enhancement(s):

* KVM Sapphire Rapids (SPR) AMX Instructions (BZ#2088287)
* KVM Sapphire Rapids (SPR) AMX Instructions part2 (BZ#2088288)
* ice: Driver Update (BZ#2102359)
* iavf: Driver Update (BZ#2102360)
* iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (BZ#2112983)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6460" id="RHSA-2022:6460" type="rhsa" title="RHSA-2022:6460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21123" id="CVE-2022-21123" type="cve" title="CVE-2022-21123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21125" id="CVE-2022-21125" type="cve" title="CVE-2022-21125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21166" id="CVE-2022-21166" type="cve" title="CVE-2022-21166"/>
      <reference href="https://bugzilla.redhat.com/2090237" id="2090237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090240" id="2090240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090241" id="2090241" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6460.html" id="ALSA-2022:6460" type="self" title="ALSA-2022:6460"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.26.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.26.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-372.26.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1ce184e5c2a5871275b043e85dbf7b740ae3255e592399c07b2749d14f1ca70c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6539</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-09-15 00:00:00"/>
    <updated date="2022-10-14 12:22:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6539" id="RHSA-2022:6539" type="rhsa" title="RHSA-2022:6539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38013" id="CVE-2022-38013" type="cve" title="CVE-2022-38013"/>
      <reference href="https://bugzilla.redhat.com/2125124" id="2125124" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6539.html" id="ALSA-2022:6539" type="self" title="ALSA-2022:6539"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.109" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ceb44c2ee435c57c05cf6f8af8728e3ccecf7f6489e9b3c26807be4c4b13f1b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6781</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2022-10-04 00:00:00"/>
    <updated date="2022-10-14 16:12:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)
* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6781" id="RHSA-2022:6781" type="rhsa" title="RHSA-2022:6781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128600" id="2128600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6781.html" id="ALSA-2022:6781" type="self" title="ALSA-2022:6781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.7.el8_6.1.aarch64.rpm</filename>
          <sum type="sha256">4213366f61b8736fe1f81b2f38b9c72b0c9c214b173bdee9511284e645fc7fb4</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.7.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">4ae6adb80ef0cf16255901a7899a08619e8c7296aad7c35a3d5e41d6de74a469</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.7.el8_6.1.aarch64.rpm</filename>
          <sum type="sha256">c1b3c5bc1cc6b246c4846b0386e5ea71656c08c696affca1767df6511a4e3a63</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.7.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">f28397c47c0da1d03984565ecf626418ec36202ba7ab0595d7d0f8a80ce50757</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6911</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 00:00:00"/>
    <updated date="2022-10-19 07:59:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6911" id="RHSA-2022:6911" type="rhsa" title="RHSA-2022:6911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6911.html" id="ALSA-2022:6911" type="self" title="ALSA-2022:6911"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.110" release="1.el8_6" epoch="0" arch="aarch64" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.110-1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">865fe18509b29f68fbff47e63ddb359f458375f8b23a350c08a6d6625578d18b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7000</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-8] (BZ#2132503)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7000" id="RHSA-2022:7000" type="rhsa" title="RHSA-2022:7000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7000.html" id="ALSA-2022:7000" type="self" title="ALSA-2022:7000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="java-17-openjdk-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1394a178d03c58275edc73278eaf6cf49fdd4838d105dc83ac62b2316e232dd0</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">199a82a3dcc403f4240dd571a0f9cf2f755b82504c91f61904186582f9dc4174</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">1e1d59613660e3ddbab5eecc7329002f8078548e8c8db54760868df6e87e0a7b</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">286169e787fd835b094ff317486b702e04ac48acb1dfb46546d392901ba35469</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">452b4e07f38a915f4d8c0a39a189e667dad3d69e502fd63a53e605730159ff8f</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">53a537fa1b0bf2b5e7ecf60dab6c5eddb44a95f8cdd18a9aa0bcdb3a8d12f151</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">58b19fe0bb88e536652524b9a70a10c5d0315bebd607c45a80036be7c93082df</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">5b011b8d4a64d9d863f7bb42030d75f84ce776990d7028b609003cce89a6d0be</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8d473217e2015cf5dab12df44a63b5de08d4ad87b595ded8c37eae72e015224e</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8f941c93b669f20ea6e64816f8c8b3e154d28e06d46f60118370eb9a2ccc7014</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">ac7518c92abccfc6a37ed48013f277dd1d721c9c1b48ecdecd4b41329845f46f</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">bbc74125c9402e18c20b08ad239599b19f0e4cbae960777fbc9541bf3a0328f3</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">bdfec4e16c64b2736d55ba904544879bfcd67adeb2041054eb85a26cc8efc5f2</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.5.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d0016bf6247ba5e28eaa27553518b5ae9f24c8bbc3cbb4705bf03b6281a0038a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7006</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2022-10-21 14:14:23"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7006" id="RHSA-2022:7006" type="rhsa" title="RHSA-2022:7006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7006.html" id="ALSA-2022:7006" type="self" title="ALSA-2022:7006"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">09682fd8566e282d1f42c7b582f4aeed7129b4fbb77ed27096237adf1789ef1b</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">2dd05eba4783192f40d5d167c549ebee8d2665378660f5ac39831cb3e4767e45</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">35d6d16dd61866cfe5e558bb2c8b2eb5a06e3af734d96554dcbc69cbee68173e</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3d1b5f1b6d907192448000007a633f8956ee7a6cbbc66842b67f72ed992d3ca7</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3def63818cf8979ec2d2071e2eb62e9b4b397ec52c716f4eefaa350e437c3c24</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4f903ccff52b67721e3338e4c550a42a7ddc413f8874fac052a296dc857db5db</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">658836a1c1197a3108e1879d865ced77c9712cc1f8abebaac395aaf5f648d564</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">6c270a9c690078ad07dec8ba3319966e9ca7d354f51a0ffabbfd43fef78e4d2d</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">7edda732855ee502bf6f465c354d823c15efb88b658fc0d72566a48c133268bc</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">aea00a63ee991ee7d1ffa412a5d2ddd448417712ad9523980d6085cfb186186a</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d8e7fe25f956b3789414710b88b38bbc5c70dcb461e453d9944139fd8ff18e85</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.352.b08" release="2.el8_6" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.352.b08-2.el8_6.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.352.b08-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">e649e753363e10b5608a50f412f67e5bef26fcab6478c541508aabf986bf7cac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7012</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-8] (BZ#2131863)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7012" id="RHSA-2022:7012" type="rhsa" title="RHSA-2022:7012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7012.html" id="ALSA-2022:7012" type="self" title="ALSA-2022:7012"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">221eea5e2bfc1d1360489614605945b13199ea6368b9382f8b02dfacfc8f86f3</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">2c2a2976f65600d6c7a3b1b30977937c64767cc87df7d5d42696766021c6e37a</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">32aba61647185bd452c54612590347ee429fa3c16fa7e84c44e64716fb97eb98</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">40c18016f15bd804ec0301caa601e964166119c62b9c88086d07b280d214e4e4</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">55bb0f0bf43556693227bb8e8b59723d52a60b260147fd891faedf31a86cb416</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">8356ef7934ad09911c1c8903e5d9b8f532ed85c383e070be0f3c5bfb93cf92ec</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">86fd1515728088578b39d24f53000cb9a1802efd193d0b2e5a2e7f0f47984466</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a367444a280112cc81a27ec093e5b0bbe47babbcbf632b0c71cfd54e6f492973</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">c4e1e7e47c62b8abebc3cea783611b110f77ec3fbf04c665ba23e7abae7f2bdc</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d778d8900ac99a30d1759e5d88618fcd8f50733ee2fc86de94ef5fbf1bd9efbe</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">d8df1663495c2e16ee57d4c4a29a78a18c98c9b71e3dea97e12a4adc53460556</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">f6ec4f65267a5ec353e64131caac0013e57f9cac21b0434851b85409417dc907</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">f6f02cfcd9f805d6518d1fb6280025ffcd7c200b4806e90c804b44048c9a01eb</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.17.0.8-2.el8_6.aarch64.rpm</filename>
          <sum type="sha256">fc0e0e83fbe2f5931b8a4355aed61d1369e8442ddcc3ee21b903fb1d01b61d4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7089</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 00:00:00"/>
    <updated date="2022-10-26 12:00:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7089" id="RHSA-2022:7089" type="rhsa" title="RHSA-2022:7089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515"/>
      <reference href="https://bugzilla.redhat.com/2135610" id="2135610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7089.html" id="ALSA-2022:7089" type="self" title="ALSA-2022:7089"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="libksba-devel" version="1.3.5" release="8.el8_6" epoch="0" arch="aarch64" src="libksba-1.3.5-8.el8_6.src.rpm">
          <filename>libksba-devel-1.3.5-8.el8_6.aarch64.rpm</filename>
          <sum type="sha256">4d0b066d0d01fc4d6f541161df7857db8b95e83db54bb72feb09db7ec4b0f77b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7106</id>
    <title>Moderate: zlib security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 12:13:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zlib security update</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7106" id="RHSA-2022:7106" type="rhsa" title="RHSA-2022:7106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7106.html" id="ALSA-2022:7106" type="self" title="ALSA-2022:7106"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="zlib-static" version="1.2.11" release="19.el8_6" epoch="0" arch="aarch64" src="zlib-1.2.11-19.el8_6.src.rpm">
          <filename>zlib-static-1.2.11-19.el8_6.aarch64.rpm</filename>
          <sum type="sha256">040f3083e365dce75573fb58e837d94530d488cabb9db22891a07ccf2da4df6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7110</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:56:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* A use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588)
* Information leak in scsi_ioctl() (CVE-2022-0494)
* A kernel-info-leak issue in pfkey_register (CVE-2022-1353)
* RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-23816, CVE-2022-29900)
* Branch Type Confusion (non-retbleed) (CVE-2022-23825)
* RetBleed Arbitrary Speculative Code Execution with Return Instructions (CVE-2022-29901)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Add s390_iommu_aperture kernel parameter (BZ#2081324)
* Blackscreen and hangup after resume from hibernate or S3 with DFGX WX3200 (BZ#2091065)
* Update NVME subsystem with bug fixes and minor changes (BZ#2106017)
* Fix parsing of nw_proto for IPv6 fragments (BZ#2106703)
* "vmcore failed, _exitcode:139" error observed while capturing vmcore during fadump after memory remove. incomplete vmcore is captured. (BZ#2107488)
* 'disable_policy' is ignored for addresses configured on a down interface (BZ#2109971)
* Backport request for new cpufreq.default_governor kernel command line parameter (BZ#2109996)
* Panics in mpt3sas mpt3sas_halt_firmware() if mpt3sas_fwfault_debug=1 enabled when poweroff issued to server (BZ#2111140)
* IOMMU/DMA update for 8.7 (BZ#2111692)
* Update Broadcom Emulex lpfc driver for AlmaLinux8.7 with bug fixes (14.0.0.13) (BZ#2112103)
* Incorrect Socket(s) &amp; "Core(s) per socket" reported by lscpu command. (BZ#2112820)
* Panic in ch_release() due to NULL ch-&gt;device pointer, backport upstream fix (BZ#2115965)
* pyverbs-tests fail over qede IW HCAs on "test_query_rc_qp" (tests.test_qp.QPTest) (BZ#2119122)
* qedi shutdown handler hangs upon reboot (BZ#2119847)
* cache link_info for ethtool (BZ#2120197)
* Important iavf bug fixes (BZ#2120225)
* Hibernate crash with Aquantia 2.5/5 Gb LAN card (BZ#2124966)
* While using PTimekeeper the qede driver produces excessive log messages (BZ#2125477)
* general protection fault handling rpc_xprt.timer (BZ#2126184)
* Not enough device MSI-X vectors (BZ#2126482)
* Atlantic driver panic on wakeup after hybernate (BZ#2127845)
* Memory leak in vxlan_xmit_one (BZ#2131255)
* Missing hybernate/resume fixes (BZ#2131936)

Enhancement(s):

* Update smartpqi driver to latest upstream Second Set of Patches (BZ#2112354)
* qed/qede/qedr - driver updates to latest upstream (BZ#2120611)
* Update qedi driver to latest upstream (BZ#2120612)
* Update qedf driver to latest upstream (BZ#2120613)
* Include the support for new NVIDIA Mobile GFX GA103 on ADL Gen Laptops (BZ#2127122)
* Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129923)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7110" id="RHSA-2022:7110" type="rhsa" title="RHSA-2022:7110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0494" id="CVE-2022-0494" type="cve" title="CVE-2022-0494"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1353" id="CVE-2022-1353" type="cve" title="CVE-2022-1353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23816" id="CVE-2022-23816" type="cve" title="CVE-2022-23816"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23825" id="CVE-2022-23825" type="cve" title="CVE-2022-23825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2588" id="CVE-2022-2588" type="cve" title="CVE-2022-2588"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29900" id="CVE-2022-29900" type="cve" title="CVE-2022-29900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29901" id="CVE-2022-29901" type="cve" title="CVE-2022-29901"/>
      <reference href="https://bugzilla.redhat.com/2039448" id="2039448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066819" id="2066819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090226" id="2090226" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103148" id="2103148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2103153" id="2103153" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114849" id="2114849" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7110.html" id="ALSA-2022:7110" type="self" title="ALSA-2022:7110"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.32.1.el8_6" epoch="0" arch="aarch64" src="kernel-4.18.0-372.32.1.el8_6.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-372.32.1.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a86f981a958086a54e95eb2fbe37c7b16c9d1bf98212ace3655ae3ab8fab0fe9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7111</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:05:29"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* python3-samba requires samba and that is a bug (BZ#2126041)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7111" id="RHSA-2022:7111" type="rhsa" title="RHSA-2022:7111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7111.html" id="ALSA-2022:7111" type="self" title="ALSA-2022:7111"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="libwbclient-devel" version="4.15.5" release="10.el8_6" epoch="0" arch="aarch64" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>libwbclient-devel-4.15.5-10.el8_6.aarch64.rpm</filename>
          <sum type="sha256">20643e6db471b3f10dedf93468053b7b9db22808fc623900c1a34fad2e8d106e</sum>
        </package>
        <package name="libsmbclient-devel" version="4.15.5" release="10.el8_6" epoch="0" arch="aarch64" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>libsmbclient-devel-4.15.5-10.el8_6.aarch64.rpm</filename>
          <sum type="sha256">3bf0f66dcc08f94281c3a44b260000a7bd25a17685df46f128f3a6fc47f7f9e0</sum>
        </package>
        <package name="samba-devel" version="4.15.5" release="10.el8_6" epoch="0" arch="aarch64" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>samba-devel-4.15.5-10.el8_6.aarch64.rpm</filename>
          <sum type="sha256">a7700a4e6bd17e384c9a1de5232ecacf686b4a37becfd4d88121b2fe85c06ae9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7192</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 06:24:13"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>device-mapper-multipath security update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7192" id="RHSA-2022:7192" type="rhsa" title="RHSA-2022:7192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41974" id="CVE-2022-41974" type="cve" title="CVE-2022-41974"/>
      <reference href="https://bugzilla.redhat.com/2133988" id="2133988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7192.html" id="ALSA-2022:7192" type="self" title="ALSA-2022:7192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.4" release="22.el8_6.2" epoch="0" arch="aarch64" src="device-mapper-multipath-0.8.4-22.el8_6.2.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.4-22.el8_6.2.aarch64.rpm</filename>
          <sum type="sha256">b45e6f95c6f815d6d71a1eb3084dbd62748094d78da77242afc9bf16363797ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7464</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:30:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7464" id="RHSA-2022:7464" type="rhsa" title="RHSA-2022:7464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570"/>
      <reference href="https://bugzilla.redhat.com/2049429" id="2049429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7464.html" id="ALSA-2022:7464" type="self" title="ALSA-2022:7464"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="protobuf-devel" version="3.5.0" release="15.el8" epoch="0" arch="aarch64" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-devel-3.5.0-15.el8.aarch64.rpm</filename>
          <sum type="sha256">2a32925080d1b88f9c463341dffd802bea8edf51a7ae885f1cc79fc147c64373</sum>
        </package>
        <package name="protobuf-lite-devel" version="3.5.0" release="15.el8" epoch="0" arch="aarch64" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-lite-devel-3.5.0-15.el8.aarch64.rpm</filename>
          <sum type="sha256">ba181d5693e46992d2f3e0f0063b18c0c677cca7a60f9b6d83af558c3611391a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7482</id>
    <title>Moderate: qt5 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:11:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security, bug fix, and enhancement update</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377)

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7482" id="RHSA-2022:7482" type="rhsa" title="RHSA-2022:7482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255"/>
      <reference href="https://bugzilla.redhat.com/2055505" id="2055505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7482.html" id="ALSA-2022:7482" type="self" title="ALSA-2022:7482"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="qt5-devel" version="5.15.3" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.3-1.el8.src.rpm">
          <filename>qt5-devel-5.15.3-1.el8.noarch.rpm</filename>
          <sum type="sha256">e2529c70aaac1f516304f2c9f5f4f55d20b2aacb24eb513aa2c65655122f5909</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7524</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:50:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7524" id="RHSA-2022:7524" type="rhsa" title="RHSA-2022:7524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795"/>
      <reference href="https://bugzilla.redhat.com/2072912" id="2072912" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7524.html" id="ALSA-2022:7524" type="self" title="ALSA-2022:7524"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="yajl-devel" version="2.1.0" release="11.el8" epoch="0" arch="aarch64" src="yajl-2.1.0-11.el8.src.rpm">
          <filename>yajl-devel-2.1.0-11.el8.aarch64.rpm</filename>
          <sum type="sha256">8e6e60a7cede49026f1d05ab4b42d7696175b9ededfe8f4d8139b3cc45048678</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7558</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:29:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>wavpack security update</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7558" id="RHSA-2022:7558" type="rhsa" title="RHSA-2022:7558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269"/>
      <reference href="https://bugzilla.redhat.com/2064457" id="2064457" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7558.html" id="ALSA-2022:7558" type="self" title="ALSA-2022:7558"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="wavpack-devel" version="5.1.0" release="16.el8" epoch="0" arch="aarch64" src="wavpack-5.1.0-16.el8.src.rpm">
          <filename>wavpack-devel-5.1.0-16.el8.aarch64.rpm</filename>
          <sum type="sha256">a90e3943f7b2b1057986246e1cc2f33d95f4584bd725eb2c860f71b7082be10a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7581</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 15:20:22"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7581" id="RHSA-2022:7581" type="rhsa" title="RHSA-2022:7581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7581.html" id="ALSA-2022:7581" type="self" title="ALSA-2022:7581"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <module name="python38" stream="3.8" version="8060020220421094004" context="34b68433" arch="ppc64le"/>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7583</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:19:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7583" id="RHSA-2022:7583" type="rhsa" title="RHSA-2022:7583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7583.html" id="ALSA-2022:7583" type="self" title="ALSA-2022:7583"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="9.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-9.el8.aarch64.rpm</filename>
          <sum type="sha256">3f08ce6ffefd9eed4298d35e4a0ccb030eaa130bb69ed817250e42e2de7d7ee4</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="9.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-9.el8.noarch.rpm</filename>
          <sum type="sha256">fc4b06bade5230542423feab5a4bc7716bf03b72a2645988adc92c870b816338</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7585</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:13:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
* libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
* libtiff: reachable assertion (CVE-2022-0865)
* libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
* libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
* libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
* libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
* tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908)
* tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7585" id="RHSA-2022:7585" type="rhsa" title="RHSA-2022:7585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0561" id="CVE-2022-0561" type="cve" title="CVE-2022-0561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0562" id="CVE-2022-0562" type="cve" title="CVE-2022-0562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0865" id="CVE-2022-0865" type="cve" title="CVE-2022-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0891" id="CVE-2022-0891" type="cve" title="CVE-2022-0891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0908" id="CVE-2022-0908" type="cve" title="CVE-2022-0908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0909" id="CVE-2022-0909" type="cve" title="CVE-2022-0909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0924" id="CVE-2022-0924" type="cve" title="CVE-2022-0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1355" id="CVE-2022-1355" type="cve" title="CVE-2022-1355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22844" id="CVE-2022-22844" type="cve" title="CVE-2022-22844"/>
      <reference href="https://bugzilla.redhat.com/2042603" id="2042603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054494" id="2054494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054495" id="2054495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064145" id="2064145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064146" id="2064146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064148" id="2064148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064406" id="2064406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064411" id="2064411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074415" id="2074415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7585.html" id="ALSA-2022:7585" type="self" title="ALSA-2022:7585"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="libtiff-tools" version="4.0.9" release="23.el8" epoch="0" arch="aarch64" src="libtiff-4.0.9-23.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-23.el8.aarch64.rpm</filename>
          <sum type="sha256">1521b140f3a590bf95ddfb0f3f89dace386a9f3ee57d219671fa3d7fc419f415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7592</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 14:01:25"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7592" id="RHSA-2022:7592" type="rhsa" title="RHSA-2022:7592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7592.html" id="ALSA-2022:7592" type="self" title="ALSA-2022:7592"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <module name="python39" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-debug" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="aarch64" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-debug-3.9.13-1.module_el8.7.0+3344+df07b58a.aarch64.rpm</filename>
          <sum type="sha256">014e8db8373ac83ca9532f27cecf6d072beb416ec57bf976c609f620108458e5</sum>
        </package>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7594</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:27:04"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7594" id="RHSA-2022:7594" type="rhsa" title="RHSA-2022:7594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337"/>
      <reference href="https://bugzilla.redhat.com/2087190" id="2087190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7594.html" id="ALSA-2022:7594" type="self" title="ALSA-2022:7594"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="poppler-cpp-devel" version="20.11.0" release="5.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">083c2dfe031eb2b0e506c4fc70bdfaa9b423d6bdb6c9f9d553bdaa6ba4a9dc59</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="5.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">0f158c871f6781b9f336b11da46922e7e02fb0a099cd46390ee010f2fab0d5ff</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="5.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">56114607b0a798e1f2b4819bb1e4591225d23709b5d622424eb52392bc76140d</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="5.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-devel-20.11.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">77b53287dfbcd76351cc0a5983a5075d7bc698eef376fb0115f5339efa603750</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="5.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">921f19143b7a8281631fd0f7cb8ee28630cb2bfcb6a913610c056317b67f3c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7623</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:00:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7623" id="RHSA-2022:7623" type="rhsa" title="RHSA-2022:7623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550"/>
      <reference href="https://bugzilla.redhat.com/2105070" id="2105070" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7623.html" id="ALSA-2022:7623" type="self" title="ALSA-2022:7623"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="dovecot-devel" version="2.3.16" release="3.el8" epoch="1" arch="aarch64" src="dovecot-2.3.16-3.el8.src.rpm">
          <filename>dovecot-devel-2.3.16-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d1e6308924d56009392e0e4f4b4bc9f3e2023d0dbf031cb5b4c222291ce62dcb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7639</id>
    <title>Moderate: openblas security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:18:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openblas security update</summary>
    <description>OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.

Security Fix(es):

* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7639" id="RHSA-2022:7639" type="rhsa" title="RHSA-2022:7639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4048" id="CVE-2021-4048" type="cve" title="CVE-2021-4048"/>
      <reference href="https://bugzilla.redhat.com/2024358" id="2024358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7639.html" id="ALSA-2022:7639" type="self" title="ALSA-2022:7639"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="openblas-openmp" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-openmp-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">59ab87504e93e902717a1828c35d8c5c5ec8c827dd9264f85e7d053a1b3e9aa2</sum>
        </package>
        <package name="openblas-openmp64_" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-openmp64_-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">742429aaf0563726b781cb2cf320cbad6b30f9ffb9d7d332872df0dd56749c2b</sum>
        </package>
        <package name="openblas-threads64" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-threads64-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7bb7e12d8331f5ce1c2f9d7f8c74457cd42092e22059979ca84609bbd772ba94</sum>
        </package>
        <package name="openblas-threads64_" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-threads64_-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">8b1c8f1447091b3fb6ee4c819446af3e67b18a7e6f4a163b60c0082a0b1d80ef</sum>
        </package>
        <package name="openblas-Rblas" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-Rblas-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">9847bb0fe656298cac888822484377f92fb1120845261c4ffb3a27b24866a0f5</sum>
        </package>
        <package name="openblas-openmp64" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-openmp64-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">a350e17e860152362de4fb161ccec0c3e2c85d88e0b6ebaf5b565c848205a767</sum>
        </package>
        <package name="openblas-static" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-static-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">cf89d9e15e6c5d82c37003a061daeaaf086747ffecdcdf0e1e34663c10b5c2c2</sum>
        </package>
        <package name="openblas-devel" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-devel-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">d0a5d6e54ba629a9e7ade413eb354d70b11e9fa4693b8303db34886497547a2a</sum>
        </package>
        <package name="openblas-serial64_" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-serial64_-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">dd1f96b0b243fecd8759f7318cdc7cd7a18214bc44fb2af193f6773812bad509</sum>
        </package>
        <package name="openblas-serial64" version="0.3.15" release="4.el8" epoch="0" arch="aarch64" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-serial64-0.3.15-4.el8.aarch64.rpm</filename>
          <sum type="sha256">f30fb817e289dcc6c8c2028274cb576249dc3b9f9e2d993d5f4637a50e180f95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7643</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:00:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7643" id="RHSA-2022:7643" type="rhsa" title="RHSA-2022:7643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064513" id="2064513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7643.html" id="ALSA-2022:7643" type="self" title="ALSA-2022:7643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="python3-bind9.16" version="9.16.23" release="0.9.el8.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.9.el8.1.noarch.rpm</filename>
          <sum type="sha256">043237613c36891d481d246202c360a7b5340af3d29246b2fd86f3999c6fc9f9</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.9.el8.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.9.el8.1.aarch64.rpm</filename>
          <sum type="sha256">4433ba0c008d04a4608540b4731f59bb6a715f5c97aeb2b838b69b358f178d7a</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.9.el8.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.9.el8.1.noarch.rpm</filename>
          <sum type="sha256">9addb777361f2160f4569d500c51faf15a005456562b018162de3b4d51d18d77</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.9.el8.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.9.el8.1.aarch64.rpm</filename>
          <sum type="sha256">c7b5f9818723f62e6d143897d10fbcdd5ea889e2ca419a6727de8d8fd4f682d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7645</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:47:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7645" id="RHSA-2022:7645" type="rhsa" title="RHSA-2022:7645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122"/>
      <reference href="https://bugzilla.redhat.com/2067052" id="2067052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7645.html" id="ALSA-2022:7645" type="self" title="ALSA-2022:7645"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="openjpeg2-devel" version="2.4.0" release="5.el8" epoch="0" arch="aarch64" src="openjpeg2-2.4.0-5.el8.src.rpm">
          <filename>openjpeg2-devel-2.4.0-5.el8.aarch64.rpm</filename>
          <sum type="sha256">4c081372acb105c2e6ee6c2d4ba23027ae31d41303c38e0d63e19b83447dc2de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7683</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:27:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* off-path attacker may inject data or terminate victim's TCP session (CVE-2020-36516)
* race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference (CVE-2020-36558)
* use-after-free vulnerability in function sco_sock_sendmsg() (CVE-2021-3640)
* memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c (CVE-2021-30002)
* smb2_ioctl_query_info NULL Pointer Dereference (CVE-2022-0168)
* NULL pointer dereference in udf_expand_file_adinicbdue() during writeback (CVE-2022-0617)
* swiotlb information leak with DMA_FROM_DEVICE (CVE-2022-0854)
* uninitialized registers on stack in nft_do_chain can cause kernel pointer leakage to UM (CVE-2022-1016)
* race condition in snd_pcm_hw_free leading to use-after-free (CVE-2022-1048)
* use-after-free in tc_new_tfilter() in net/sched/cls_api.c (CVE-2022-1055)
* use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (CVE-2022-1184)
* NULL pointer dereference in x86_emulate_insn may lead to DoS (CVE-2022-1852)
* buffer overflow in nft_set_desc_concat_parse() (CVE-2022-2078)
* nf_tables cross-table potential use-after-free may lead to local privilege escalation (CVE-2022-2586)
* openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size() (CVE-2022-2639)
* use-after-free when psi trigger is destroyed while being polled (CVE-2022-2938)
* net/packet: slab-out-of-bounds access in packet_recvmsg() (CVE-2022-20368)
* possible to use the debugger to write zero into a location of choice (CVE-2022-21499)
* Spectre-BHB (CVE-2022-23960)
* Post-barrier Return Stack Buffer Predictions (CVE-2022-26373)
* memory leak in drivers/hid/hid-elo.c (CVE-2022-27950)
* double free in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c (CVE-2022-28390)
* use after free in SUNRPC subsystem (CVE-2022-28893)
* use-after-free due to improper update of reference count in net/sched/cls_u32.c (CVE-2022-29581)
* DoS in nfqnl_mangle in net/netfilter/nfnetlink_queue.c (CVE-2022-36946)
* nfs_atomic_open() returns uninitialized data instead of ENOTDIR (CVE-2022-24448)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7683" id="RHSA-2022:7683" type="rhsa" title="RHSA-2022:7683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36516" id="CVE-2020-36516" type="cve" title="CVE-2020-36516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36558" id="CVE-2020-36558" type="cve" title="CVE-2020-36558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-30002" id="CVE-2021-30002" type="cve" title="CVE-2021-30002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3640" id="CVE-2021-3640" type="cve" title="CVE-2021-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0168" id="CVE-2022-0168" type="cve" title="CVE-2022-0168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0617" id="CVE-2022-0617" type="cve" title="CVE-2022-0617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0854" id="CVE-2022-0854" type="cve" title="CVE-2022-0854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1016" id="CVE-2022-1016" type="cve" title="CVE-2022-1016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1048" id="CVE-2022-1048" type="cve" title="CVE-2022-1048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1055" id="CVE-2022-1055" type="cve" title="CVE-2022-1055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1184" id="CVE-2022-1184" type="cve" title="CVE-2022-1184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1852" id="CVE-2022-1852" type="cve" title="CVE-2022-1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20368" id="CVE-2022-20368" type="cve" title="CVE-2022-20368"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2078" id="CVE-2022-2078" type="cve" title="CVE-2022-2078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21499" id="CVE-2022-21499" type="cve" title="CVE-2022-21499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23960" id="CVE-2022-23960" type="cve" title="CVE-2022-23960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24448" id="CVE-2022-24448" type="cve" title="CVE-2022-24448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2586" id="CVE-2022-2586" type="cve" title="CVE-2022-2586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-26373" id="CVE-2022-26373" type="cve" title="CVE-2022-26373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2639" id="CVE-2022-2639" type="cve" title="CVE-2022-2639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27950" id="CVE-2022-27950" type="cve" title="CVE-2022-27950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28390" id="CVE-2022-28390" type="cve" title="CVE-2022-28390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28893" id="CVE-2022-28893" type="cve" title="CVE-2022-28893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2938" id="CVE-2022-2938" type="cve" title="CVE-2022-2938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-29581" id="CVE-2022-29581" type="cve" title="CVE-2022-29581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36946" id="CVE-2022-36946" type="cve" title="CVE-2022-36946"/>
      <reference href="https://bugzilla.redhat.com/1946279" id="1946279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1980646" id="1980646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2037386" id="2037386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2051444" id="2051444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2053632" id="2053632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2058395" id="2058395" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2059928" id="2059928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2062284" id="2062284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066614" id="2066614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2066706" id="2066706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2069408" id="2069408" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070205" id="2070205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2070220" id="2070220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073064" id="2073064" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074208" id="2074208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084183" id="2084183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084479" id="2084479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2088021" id="2088021" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2089815" id="2089815" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2096178" id="2096178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2112693" id="2112693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114878" id="2114878" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115065" id="2115065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2115278" id="2115278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120175" id="2120175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123695" id="2123695" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7683.html" id="ALSA-2022:7683" type="self" title="ALSA-2022:7683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.3.1.el8" epoch="0" arch="aarch64" src="kernel-4.18.0-425.3.1.el8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-425.3.1.el8.aarch64.rpm</filename>
          <sum type="sha256">c042dba9700b935e3bb61ddf81838f4aff38c2b8afbc52823bd2e353d9ad517c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7692</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:16:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)
* expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)
* expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)
* expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)
* expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)
* expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)
* expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7692" id="RHSA-2022:7692" type="rhsa" title="RHSA-2022:7692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46143" id="CVE-2021-46143" type="cve" title="CVE-2021-46143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22822" id="CVE-2022-22822" type="cve" title="CVE-2022-22822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22823" id="CVE-2022-22823" type="cve" title="CVE-2022-22823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22824" id="CVE-2022-22824" type="cve" title="CVE-2022-22824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22825" id="CVE-2022-22825" type="cve" title="CVE-2022-22825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22826" id="CVE-2022-22826" type="cve" title="CVE-2022-22826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22827" id="CVE-2022-22827" type="cve" title="CVE-2022-22827"/>
      <reference href="https://bugzilla.redhat.com/2044455" id="2044455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044457" id="2044457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044464" id="2044464" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044467" id="2044467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044479" id="2044479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044484" id="2044484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044488" id="2044488" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7692.html" id="ALSA-2022:7692" type="self" title="ALSA-2022:7692"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="xmlrpc-c-client++" version="1.51.0" release="8.el8" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-8.el8.aarch64.rpm</filename>
          <sum type="sha256">31dd6b2a0928b655c768c9e6bc8855dd1eaad2724ef73e28783b37dcf166b2fe</sum>
        </package>
        <package name="xmlrpc-c-c++" version="1.51.0" release="8.el8" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-8.el8.aarch64.rpm</filename>
          <sum type="sha256">f6ee97f46ccc356289e6a688afd933d8d73636c6c428cf693412ea7b35ec32e5</sum>
        </package>
        <package name="xmlrpc-c-devel" version="1.51.0" release="8.el8" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-8.el8.aarch64.rpm</filename>
          <sum type="sha256">ff983889915fb6b0f6028c72629ac3d25558e2afd10667a18ba35aab3d695eb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7720</id>
    <title>Moderate: e2fsprogs security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 20:04:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>e2fsprogs security and bug fix update</summary>
    <description>The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.

Security Fix(es):

* e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7720" id="RHSA-2022:7720" type="rhsa" title="RHSA-2022:7720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1304" id="CVE-2022-1304" type="cve" title="CVE-2022-1304"/>
      <reference href="https://bugzilla.redhat.com/2069726" id="2069726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7720.html" id="ALSA-2022:7720" type="self" title="ALSA-2022:7720"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="libss-devel" version="1.45.6" release="5.el8" epoch="0" arch="aarch64" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>libss-devel-1.45.6-5.el8.aarch64.rpm</filename>
          <sum type="sha256">30a0e8c526024e0b39fad2e31955369031805705f0d5d0397c992e5d7bfbee46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7730</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 10:54:10"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libldb security, bug fix, and enhancement update</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077484)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7730" id="RHSA-2022:7730" type="rhsa" title="RHSA-2022:7730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746"/>
      <reference href="https://bugzilla.redhat.com/2108215" id="2108215" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7730.html" id="ALSA-2022:7730" type="self" title="ALSA-2022:7730"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="python3-ldb-devel" version="2.5.2" release="2.el8" epoch="0" arch="aarch64" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>python3-ldb-devel-2.5.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2a5666a3df3dc0d477aaf9d7660dbb308bef44f635609b31ecc0a62b16b12264</sum>
        </package>
        <package name="python-ldb-devel-common" version="2.5.2" release="2.el8" epoch="0" arch="aarch64" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>python-ldb-devel-common-2.5.2-2.el8.aarch64.rpm</filename>
          <sum type="sha256">47e762de47df3aa8de33935a8f2d6f9f2b245d780d2cc6b5718e9c326e2b71e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7826</id>
    <title>Moderate: dotnet7.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 16:57:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134642).

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7826" id="RHSA-2022:7826" type="rhsa" title="RHSA-2022:7826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7826.html" id="ALSA-2022:7826" type="self" title="ALSA-2022:7826"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_6_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_6_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.100" release="0.4.rc2.el8_7" epoch="0" arch="aarch64" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.100-0.4.rc2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">0ac7b93de7f691cf96b02d9ae340e0a53b1ba7e1d07e7499ce9349dcc3de8c37</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0079</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-12 19:42:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154458)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0079" id="RHSA-2023:0079" type="rhsa" title="RHSA-2023:0079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538"/>
      <reference href="https://bugzilla.redhat.com/2158342" id="2158342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0079.html" id="ALSA-2023:0079" type="self" title="ALSA-2023:0079"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.113" release="1.el8_7" epoch="0" arch="aarch64" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.113-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">d8b3592165e57b3331aa80171c8cb8c99608348cad942a2822cd3b55010a9ca5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0095</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 08:49:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)
* libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() (CVE-2022-2869)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)
* libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() (CVE-2022-2868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0095" id="RHSA-2023:0095" type="rhsa" title="RHSA-2023:0095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2867" id="CVE-2022-2867" type="cve" title="CVE-2022-2867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2868" id="CVE-2022-2868" type="cve" title="CVE-2022-2868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2869" id="CVE-2022-2869" type="cve" title="CVE-2022-2869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953"/>
      <reference href="https://bugzilla.redhat.com/2103222" id="2103222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118847" id="2118847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118863" id="2118863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118869" id="2118869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122789" id="2122789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122792" id="2122792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122799" id="2122799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134432" id="2134432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0095.html" id="ALSA-2023:0095" type="self" title="ALSA-2023:0095"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="libtiff-tools" version="4.0.9" release="26.el8_7" epoch="0" arch="aarch64" src="libtiff-4.0.9-26.el8_7.src.rpm">
          <filename>libtiff-tools-4.0.9-26.el8_7.aarch64.rpm</filename>
          <sum type="sha256">6e6cce3d0900144e03f5428146bf9379535e97365294fd1f09c4afedbbc18a51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0099</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 09:35:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read (CVE-2022-4144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted (BZ#2132176)
* VMs hung on vnc_clipboard_send (BZ#2148504)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0099" id="RHSA-2023:0099" type="rhsa" title="RHSA-2023:0099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4144" id="CVE-2022-4144" type="cve" title="CVE-2022-4144"/>
      <reference href="https://bugzilla.redhat.com/2148506" id="2148506" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0099.html" id="ALSA-2023:0099" type="self" title="ALSA-2023:0099"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <module name="virt" stream="rhel" version="8060020220510122810" context="9edba152" arch="aarch64"/>
        <package name="qemu-kvm-tests" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-21.module_el8.7.0+3387+571b583b.2.aarch64.rpm</filename>
          <sum type="sha256">1e69bbb9406256a68fbcaaecaa3aa18bbf8e442afdbce8222146b246acd8b686</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.aarch64.rpm</filename>
          <sum type="sha256">9c234e53edf7f9acd269fe5c1a0fd29c2e4676431d7a2cbe5ee5ba418d08e9e0</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3346+68867adb.alma.aarch64.rpm</filename>
          <sum type="sha256">a34e66348be86e0289c73baa73d5720cb277616e0700ca87b3bbbf275d98a2d9</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0101</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-16 11:10:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)
* kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* AlmaLinux8.4 - zfcp: fix missing auto port scan and thus missing target ports (BZ#2127849)
* vfio zero page mappings fail after 2M instances (BZ#2128515)
* ice: Driver Update up to 5.19 (BZ#2130992)
* atlantic: missing hybernate/resume fixes (BZ#2131935)
* Bluefield 2 DPU would crash and reboot due to a kernel panic (BZ#2134084)
* Fix issue that enables STABLE_WRITES by default and causes performance regressions (BZ#2135813)
* ice: Intel E810 PTP clock glitching (BZ#2136036)
* ice: configure link-down-on-close on and change interface mtu to 9000,the interface can't up (BZ#2136216)
* ice: dump additional CSRs for Tx hang debugging (BZ#2136513)
* ice,iavf: system panic during sriov sriov_test_cntvf_reboot testing (BZ#2137270)
* After upgrading to ocp4.11.1, our dpdk application using vlan strip offload is not working (BZ#2138157)
* i40e: orphaned-leaky memory when interacting with driver memory parameters (BZ#2138205)
* WARNING: CPU: 0 PID: 9637 at kernel/time/hrtimer.c:1309 hrtimer_start_range_ns+0x35d/0x400 (BZ#2138953)
* DELL EMC 8.6-RT: System is not booting into RT Kernel with perc12. (BZ#2139216)
* Lenovo 8.7: The VGA display shows no signal when install AlmaLinux8.7 (BZ#2140152)
* Host Pod -&gt; NodePort Service traffic (Host Backend - Same Node) Flow Iperf Cannot Pass Traffic (BZ#2141878)
* mlx5_core: mlx5_cmd_check messages scrolling with hardware offload enabled (BZ#2141957)
* net/ice: VIRTCHNL_OP_CONFIG_VSI_QUEUES command handling failure with in-tree driver (BZ#2142017)
* AlmaLinux:8.6+ IBM Partner issue - Loopback driver with ABORT_TASKS causing hangs in scsi eh, this bug was cloned for AlmaLinux8.6 and need this patch in 8.6+ (BZ#2144583)
* AMdCLIENT 8.8: The kernel command line parameter "nomodeset" not working properly (BZ#2145218)
* Path loss during Volume Ownership Change on AlmaLinux 8.7 SAS (BZ#2147374)
* net/ice: OP_SET_RSS_HENA command not supported with in-tree driver (BZ#2148130)
* iavf panic: iavf 0000:ca:01.0: Failed to init adminq: -53 (BZ#2149081)
* Intel 8.8 iavf: Driver Update (bugfixes) (BZ#2149742)
* Azure AlmaLinux-8 PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150912)
* AlmaLinux-8.7: System fails to boot with soft lockup while loading/unloading an unsigned (E) kernel module. (BZ#2152206)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0101" id="RHSA-2023:0101" type="rhsa" title="RHSA-2023:0101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2964" id="CVE-2022-2964" type="cve" title="CVE-2022-2964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4139" id="CVE-2022-4139" type="cve" title="CVE-2022-4139"/>
      <reference href="https://bugzilla.redhat.com/2067482" id="2067482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147572" id="2147572" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0101.html" id="ALSA-2023:0101" type="self" title="ALSA-2023:0101"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.10.1.el8_7" epoch="0" arch="aarch64" src="kernel-4.18.0-425.10.1.el8_7.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-425.10.1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">648b197aaaca7c6586ffa75547b866b71c1914d67b740da545daa1a23dd6239c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0192</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147473)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-8] (BZ#2153010)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0192" id="RHSA-2023:0192" type="rhsa" title="RHSA-2023:0192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0192.html" id="ALSA-2023:0192" type="self" title="ALSA-2023:0192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">085f5f3b623341a0b1752d9c7932031f4abeffe93018846f7e19fcfc1f025af5</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">0bfb4f8210cb6d623cae6bfc9519e99c8c893febce353a00bff89680687d9929</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">146b82d4249cb7ce19ddb42990c90535ac7e27c10c91e90f9ca855ab4c0d71ed</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">32eec647e27465925e2415164ea02b56b79372287c49c977ad72409e262d8727</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">706e56b950210ed62ee545c39475a4310aaa24b35821bc1ee5652eb4b60a88b1</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">a2e70ca61895feb529c889bb2f452729e4ae8a40493e9f601df294364402c63e</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">b6391d4a3827b3d2537f031c7e6d6ceedf8a4346498cc4174c80f0a22e0cb1b5</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">bb3e953efe0c02c99e2256b1a3156a39977517ff0dce9523900d5250a643596f</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">bf784edf6397a50788349a2748ff3c11437ed476a321fa656e5deea1881ee639</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">cc6bccceadd8ef33deec298f24c38b5576a763c8bce301eebd6e68ff84834371</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">ed9517fa487046d26e9295fd33135baa93fd5914615f4c10cb07f0df9342cabe</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f3629d2abb1200e00f42da0b572ac40d5893b4585791197b27d910e745a3a1a7</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f5367413fa9d8ef3784644daa25969e9b12c978bf289dc129a3fe00f2a4253cc</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.6.0.10-3.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f67d8d08b858a2d87bd3a2f4239feb5f9436923b64202e3cc057268a2465340a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0200</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-8] (BZ#2157797)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0200" id="RHSA-2023:0200" type="rhsa" title="RHSA-2023:0200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0200.html" id="ALSA-2023:0200" type="self" title="ALSA-2023:0200"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">02fd81fb020d8fef8bfb35600fa1b9b297bb7c33cc2bceaa52aa6138ae77d771</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">052a13d7544b315687b877a88dacfad3bd4299d58dd93f0180ae5445c2d8c643</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">1469537f5c86fbe74fc374c07c3e60e71f586bf5898ca199fc9329d33dfea36c</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">50effcbcbc7f684b86027c58520e3fbd648fe15238c576d7d0cce0f8b53eb293</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">5dc0462dfcac88eaad05c773e739cfc98a980e15b49b627099a3f241ee13816d</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">805f678a86759ceeeb6de5fe8bc74ec182f3702ddfff0843ff5f72cf1220218b</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">8bdc6721ea991be04b2ad0244722d1960cab82ee29f5a539592ce86fba63ffd7</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">a86f2a1d646f37a33e624a84d553aff09a9092f15f050e6fe1da01f35fdb6be6</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">b738537b81dac3b402e97f46ca8afb042bcc6a68b28b2d20eec667e9f8392aee</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">b8e3daad8a63583130d4e9bf8aef8135e68496ba3608a6c23193dde03f7e935e</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">bbf015c6264e360c48b2572e53a79b096fcfe79d04d9bef205caaf31da8555c3</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">c079c0558b37983ae52b60b9e51c6cbb3f983886a03c3d38bf1b400999a45e2b</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">d352fd0f00ee94eb4fd796c4101f5774c9179f40e734ddc3ac44cb9c5afbd553</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.18.0.10-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">e13d8984945f00bc9b36ccf3ee53f08e100f68969403a671cf95265970a02020</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0208</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-01-26 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI() (BZ#2139705)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) [almalinux-8] (BZ#2159910)
* solr broken due to access denied ("java.io.FilePermission" "/etc/pki/java/cacerts" "read") [almalinux-8, openjdk-8] (BZ#2163595)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0208" id="RHSA-2023:0208" type="rhsa" title="RHSA-2023:0208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21830" id="CVE-2023-21830" type="cve" title="CVE-2023-21830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160490" id="2160490" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0208.html" id="ALSA-2023:0208" type="self" title="ALSA-2023:0208"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">367b3f24854962e9147f2318c77dcf87dc16cd52d6053182e8cd998599eaf1f9</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">4b9b5f74527a34a2d844994e29ebb46af69f72e48bd4cbdaebb50c7d0a289d1b</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">521b6f0fea1b79c33b1b18b12c972cd6ee6a2d0594fac82b5960e62ae4948275</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">81e2838816c54a3cf30045b512601d23c80ded14ddd72013c31fe8ed75575cf7</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">88ca5f292d6d8f5d0cbb9b3ac26fad9903cd1fa490538b5808aaeac84a56c1fe</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">9e205f8f2e1c92a7c1d3c806a320fd84bfd388dfb97d0162a023ee25a3ec92b4</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">bdc43517d1bf8ebf9c6b65394acf45d381ec54e0c0c7201717185c7a8a71db4e</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">c052cddf6d22ac47fd4a337ad3e643a90dca8c8e5a8f29ff527cfcc6b6162b85</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">c64e17e04849105f8df4dae9da493f84db22df179f6ded37ae79a4853f54bff8</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">db3d59fc784ab9dc023f64d85a766fce0e9686de4d198a53f0314bb5ac6a6fe8</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f4d36ef7773caf65a2cdbea81c4274a8853f6357cb4a8763c2b576f75e7d7622</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.362.b09" release="2.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.362.b09-2.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.362.b09-2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f5f5b7a8f5448450738da6c626dc55b92a5af7acf2364347f845dbb8f1500ab6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0625</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 15:52:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0625" id="RHSA-2023:0625" type="rhsa" title="RHSA-2023:0625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629"/>
      <reference href="https://bugzilla.redhat.com/2161571" id="2161571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0625.html" id="ALSA-2023:0625" type="self" title="ALSA-2023:0625"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="libksba-devel" version="1.3.5" release="9.el8_7" epoch="0" arch="aarch64" src="libksba-1.3.5-9.el8_7.src.rpm">
          <filename>libksba-devel-1.3.5-9.el8_7.aarch64.rpm</filename>
          <sum type="sha256">b31d1d828cc7721fa44581f7fad34c35dc058f52c1179e318c20baf3c847b198</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0832</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)
* kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)
* kernel: an out-of-bounds vulnerability in i2c-ismt driver (CVE-2022-2873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134586)
* Hardware error: RIP: copy_user_enhanced_fast_string+0xe (BZ#2137592)
* Cannot trigger kernel dump using NMI on SNO node running PAO and RT kernel (BZ#2139580)
* MEI support for Alder Lake-S (BZ#2141783)
* Host Pod -&gt; Cluster IP Service traffic (Pod Backend - Different Node) Flow Iperf Cannot Connect (BZ#2141959)
* AlmaLinux8.7: Xorg cannot display resolution higher than 1024x768 on system using ast graphics driver (BZ#2149287)
* Intel 8.7 Bug: OS doesn't boot when vmd and interrupt remapping are enabled (BZ#2149474)
* i40e,iavf: SR-IOV VF devices send GARP with wrong MAC address (BZ#2149745)
* AlmaLinux8.4 - boot: Add secure boot trailer (BZ#2151530)
* error 524 from seccomp(2) when trying to load filter (BZ#2152138)
* Workqueue: WQ_MEM_RECLAIM iscsi_ctrl_1:98 __iscsi_unbind_session [scsi_transport_iscsi] (BZ#2152734)
* Connectivity issue with vDPA driver (BZ#2152912)
* High Load average due to cfs cpu throttling (BZ#2153108)
* The "kernel BUG at mm/usercopy.c:103!" from BZ 2041529 is back on almalinux-8.5 (BZ#2153230)
* AlmaLinux8: tick storm on nohz (isolated) CPU cores (BZ#2153653)
* kernel BUG: scheduling while atomic: crio/7295/0x00000002 (BZ#2154460)
* Azure AlmaLinux 8 z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning (BZ#2155272)
* Azure: VM Deployment Failures Patch Request (BZ#2155280)
* Azure vPCI AlmaLinux-8: add the support of multi-MSI (BZ#2155289)
* MSFT MANA NET Patch AlmaLinux-8: Fix race on per-CQ variable napi_iperf panic fix (BZ#2155437)
* GSS: OCP 4.10.30 node crash after ODF upgrade : unable to handle kernel NULL pointer dereference at 0000000000000000 : ceph_get_snap_realm+0x68/0xa0 [ceph] (BZ#2155797)
* Error in /usr/src/kernels/4.18.0-423.el8.x86_64/scripts/kernel-doc script causing irdma build to fail (BZ#2157905)
* AlmaLinux8.8: Backport upstream patches to reduce memory cgroup memory consumption and OOM problem (BZ#2157922)
* The 'date' command shows wrong time in nested KVM s390x guest (BZ#2158813)
* ethtool -m results in an out-of-bounds slab write in the be2net driver (BZ#2160182)
* (AlmaLinux OpenShift)Error downloading big ZIP files inside pod on power OCP and pod getting restarted (BZ#2160221)
* i40e/iavf: VF reset task fails "Never saw reset" with 5 second timeout per VF (BZ#2160460)
* iavf: It takes long time to create multiple VF interfaces and the VF interface names are not consistent (BZ#2163257)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0832" id="RHSA-2023:0832" type="rhsa" title="RHSA-2023:0832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2873" id="CVE-2022-2873" type="cve" title="CVE-2022-2873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41222" id="CVE-2022-41222" type="cve" title="CVE-2022-41222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43945" id="CVE-2022-43945" type="cve" title="CVE-2022-43945"/>
      <reference href="https://bugzilla.redhat.com/2119048" id="2119048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2138818" id="2138818" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2141752" id="2141752" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0832.html" id="ALSA-2023:0832" type="self" title="ALSA-2023:0832"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.13.1.el8_7" epoch="0" arch="aarch64" src="kernel-4.18.0-425.13.1.el8_7.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-425.13.1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">a71a12d87db38ac957114373e90e4b78a44249b7e93a6ea7b6b0a3e2d2035123</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0838</id>
    <title>Important: samba security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:23:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0838" id="RHSA-2023:0838" type="rhsa" title="RHSA-2023:0838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0838.html" id="ALSA-2023:0838" type="self" title="ALSA-2023:0838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="libsmbclient-devel" version="4.16.4" release="4.el8_7" epoch="0" arch="aarch64" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>libsmbclient-devel-4.16.4-4.el8_7.aarch64.rpm</filename>
          <sum type="sha256">4fa8293b73fe27a7d8f523ce9e7c593e58dd8c2625fa5cf3e24aee2ee3f0b901</sum>
        </package>
        <package name="libwbclient-devel" version="4.16.4" release="4.el8_7" epoch="0" arch="aarch64" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>libwbclient-devel-4.16.4-4.el8_7.aarch64.rpm</filename>
          <sum type="sha256">929df7fa0f30d2ae933e57c348f4247c0f843588f50972f6dfa29655959056f4</sum>
        </package>
        <package name="samba-devel" version="4.16.4" release="4.el8_7" epoch="0" arch="aarch64" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-devel-4.16.4-4.el8_7.aarch64.rpm</filename>
          <sum type="sha256">bb000b1d329ee13db4289e42700d8351e4686f722e1efa4205fcd974f3613c18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1566</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-04-04 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)
* ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)
* kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)
* kernel: net: CPU soft lockup in TC mirred egress-to-ingress action (CVE-2022-4269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* kernel panic on reboot due to a bug in mei_wdt module (BZ#2139770)
* AlmaLinux8: Practically limit "Dummy wait" workaround to old Intel systems (BZ#2142170)
* AMDSERVER 8.7: amdpstate driver incorrectly designed to load as default for Genoa (BZ#2151275)
* AlmaLinux-8.8: Update RDMA core to Linux v6.0 (BZ#2161750)
* Kernel panic observed during VxFS module unload (BZ#2162763)
* Client not able to connect to almalinux server: SYN is answered by chalange ACK and RST is ignored (BZ#2165587)
* AlmaLinux8.4: s390/kexec: fix ipl report address for kdump (BZ#2166296)
* kvm-unit-test reports unhandled exception on AMD (BZ#2166362)
* Windows Server 2019 guest randomly pauses with "KVM: entry failed, hardware error 0x80000021" (BZ#2166368)
* Unable to get QinQ working with ConnectX-4 Lx in SR-IOV scenario (BZ#2166665)
* panic in fib6_rule_suppress+0x22 with custom xdp prog involved in (BZ#2167602)
* net/mlx5e: Fix use-after-free when reverting termination table (BZ#2167640)
* AlmaLinux 8.7: EEH injection failed to recover on Mellanox adapter. (BZ#2167645)
* mlx5: lag and sriov fixes (BZ#2167647)
* AlmaLinux8.4:  dasd: fix no record found for raw_track_access (BZ#2167776)
* GSS: Set of fixes in ceph kernel module to prevent OCS node kernel crash -  blocklist the kclient when receiving corrupted snap trace (BZ#2168896)
* Azure AlmaLinux8 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (BZ#2170228)
* fast_isolate_freepages scans out of target zone (BZ#2170576)
* Backport Request for locking/rwsem commits (BZ#2170939)
* ipv6 traffic stop when an sriov vf have ipv6 address (BZ#2172550)
* Hyper-V AlmaLinux8.8: Update MANA driver (BZ#2173103)

Enhancement(s):

* Intel 8.8 FEAT SPR CPU: AMX: Improve the init_fpstate setup code (BZ#2168384)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1566" id="RHSA-2023:1566" type="rhsa" title="RHSA-2023:1566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4269" id="CVE-2022-4269" type="cve" title="CVE-2022-4269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4378" id="CVE-2022-4378" type="cve" title="CVE-2022-4378"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0266" id="CVE-2023-0266" type="cve" title="CVE-2023-0266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0386" id="CVE-2023-0386" type="cve" title="CVE-2023-0386"/>
      <reference href="https://bugzilla.redhat.com/2150272" id="2150272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2152548" id="2152548" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2159505" id="2159505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2163379" id="2163379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1566.html" id="ALSA-2023:1566" type="self" title="ALSA-2023:1566"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.19.2.el8_7" epoch="0" arch="aarch64" src="kernel-4.18.0-425.19.2.el8_7.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-425.19.2.el8_7.aarch64.rpm</filename>
          <sum type="sha256">3e4dc816735614c34da6f65570f53c9331a99e584c4e6189d60ee235fcbedd17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1895</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-23 06:33:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1895" id="RHSA-2023:1895" type="rhsa" title="RHSA-2023:1895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1895.html" id="ALSA-2023:1895" type="self" title="ALSA-2023:1895"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">07b8f797987ef0625b0e32df9f30eb8f3019455ed8c760261ce63af7f4fed7e6</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">0e45f3ceb5610e0c6bb6bf45908c3b902073c70dfc043bc874ef32d7e458017d</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">1e1d62cf7b6c9d8ba78b440ab50d4c0a2b559a9b82f73fd479c26c5b82a73ade</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">1f6b5c936f475e9abe8813e1d9fef83699f948392fc5863bca83f1f42e7f9b7a</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">2bcef0164ce491ed4610a0a1f10a8cd29d4587dc22f82bb23b8462471a44aa20</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">4156d5a08c720a68c3efddab1aa688683bc30f86cfc46eb72ea5c829b3f21328</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">6cecce39fc1953e574f1003b9e4a4d3adf1fdf6138b426c87b2157e5601a21ee</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">723a64385da51dd2e962842e2cc69c0211869800b3f78e5cf50546bdc452f6a4</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">761810519e63dd8ecafa39fff874336dbb47b72befe42fda9c3e247fbe2fb83a</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">825182c2630a0fdfdeab3ded5a0c5b005dc6ddc26a688192e99420a68f541ac2</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">a59a4971c54a56bc87c4e47fd56eb444187a6dca5ed890d03e7493dc7041c75b</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">aa70eb7c1b1dd462f6f1d122687237c0303395fbf43648e3f132d0e20b144167</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">c0eaeb1eac64e5f72bb2a80291d5cded33a4d1e99ac4ad1d4f78d6454ec0aa33</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">dd2cce6e7e2bf94ba7cf6f770023f6ddd36332dca1e9f9238e31cbfaa1d3a834</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1898</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-23 06:46:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186835)
* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186827)
* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186831)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1898" id="RHSA-2023:1898" type="rhsa" title="RHSA-2023:1898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1898.html" id="ALSA-2023:1898" type="self" title="ALSA-2023:1898"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">07a657afee3a83edd27ab446db7639774b36c74cedadb7d8c365e4a41854b921</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">0891d23da53b8224e47c17b08a9121d9f1cf96913085348f96b1553cd84208ac</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">0e08ca07951536fed8ecd5f359682402ccd5f6d006eb21333f886655ee469c02</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">10a26f517e69560942423f05ac0b0de9df004e39f26353a24dba530593cc20cd</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">19ca4471af9f9838f91008aec04aec5bb6bd9358b16d5504c2a697a330c760d3</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">1d1c252cabe962dd4e7954d959b33c3b8f96508584f53bcc3e1ea424cad72662</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">4a76e6fdfcdaff472de15376f66f49fa0c665b32cd978c879c9d6e5878acdd7a</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">5538b4daada3272010cd45a9179e5f9a7927314667cdc94aedb22533ca97c653</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">6fe69e9b8b643f25a1e359c647c7abacad695f3686de7f80475266692b101611</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">7a406cfbd51b021153b659db7b9e24cc62f06aff56bf7deaf0c31d734a7d046d</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">9b30b00ed2ef56f094f1bb3f25d6702d08052ab7906408d98d03a79e817350fe</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">b70d438c6d27738c96f34cb761b5be84cea46ea31b9f916c4a6509a601d36f97</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">efe51bfc104de4188457c961fa8764aa0c74849563a83a2851e6f8224a345ee5</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.7.0.7-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f6058d9d1b0318a7121079fae84aa30b4cf4145b44f3478dfab200de26d6f91c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1908</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2023-04-25 00:00:00"/>
    <updated date="2023-05-02 23:08:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1908" id="RHSA-2023:1908" type="rhsa" title="RHSA-2023:1908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1908.html" id="ALSA-2023:1908" type="self" title="ALSA-2023:1908"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_7_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_7_default</name>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">0475ec89952b0b17df4b65de5cc841170d8877cee7f33c88f8200ca810e0a5f6</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">086962e3b8afe510c9b40a7f3cfd5f0d1fe1234cdcd0402b75ea3c0688860aa7</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">469b1cc5883a23f41aefaf4a2edf282b5063828ed5270a7f0e3d53be3e156988</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">4e483c72fbddc6a85f40554f3af6b979d0e0956e6462a4c9890c7dbede8a2fb4</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">4f4d0645f48946d6092bcc49869ed73db7cbd4b098a26073edc2a598135fedc0</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">54b4f9d9ed3abb63e27ef3d79a0557ce82051f8b827e73dba722e1d9da8b1320</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">691513f7009fbf070e57d7fbcb4c0fd23af54b0d8f870d93b25c6dda04ea25cf</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">6fb53e18e7adb3f522483bb58bd44b24cb9404ed6046c78037549f0fec2d6c8d</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">df2539ad93e237c1de7dc64666141559c05a9c6697a73bdd218d7ac0d7bd761c</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">e8bc22fd09437182278c6751b46cf5d9500088806e3a3f7a85cd04df91758fa5</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">eed1cf36437e3134748dc1c8d4b757af0571251db5b635ec081c443c138e316c</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.372.b07" release="1.el8_7" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.372.b07-1.el8_7.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.372.b07-1.el8_7.aarch64.rpm</filename>
          <sum type="sha256">f3956eba6b76d48fd50098adf4f664daf28c5b468628b4ffee574e5c8b54f4ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2757</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-22 07:57:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790)
* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165)
* ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789)
* tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2757" id="RHSA-2023:2757" type="rhsa" title="RHSA-2023:2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46790" id="CVE-2021-46790" type="cve" title="CVE-2021-46790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30784" id="CVE-2022-30784" type="cve" title="CVE-2022-30784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30786" id="CVE-2022-30786" type="cve" title="CVE-2022-30786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30788" id="CVE-2022-30788" type="cve" title="CVE-2022-30788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30789" id="CVE-2022-30789" type="cve" title="CVE-2022-30789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3165" id="CVE-2022-3165" type="cve" title="CVE-2022-3165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1018" id="CVE-2023-1018" type="cve" title="CVE-2023-1018"/>
      <reference href="https://bugzilla.redhat.com/2093314" id="2093314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093326" id="2093326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093340" id="2093340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093348" id="2093348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093358" id="2093358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129739" id="2129739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149420" id="2149420" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2757.html" id="ALSA-2023:2757" type="self" title="ALSA-2023:2757"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220510122810" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-32.module_el8.8.0+3553+bd08596b.aarch64.rpm</filename>
          <sum type="sha256">7f5b62e993ccfffabf49f89ae793eee1c4dd1d66ab110028d82e775425727735</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2763</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:08:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

The following packages have been upgraded to a later upstream version: python38 (3.8.16).

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2763" id="RHSA-2023:2763" type="rhsa" title="RHSA-2023:2763"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2763.html" id="ALSA-2023:2763" type="self" title="ALSA-2023:2763"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="python38" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2764</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:09:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python39 (3.9.16).

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2764" id="RHSA-2023:2764" type="rhsa" title="RHSA-2023:2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2764.html" id="ALSA-2023:2764" type="self" title="ALSA-2023:2764"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-debug" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="aarch64" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-debug-3.9.16-1.module_el8.8.0+3483+a028a3dd.aarch64.rpm</filename>
          <sum type="sha256">f144323f866156235fc83bded45623fdb25173252518e39638afbf6987df4a63</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2792</id>
    <title>Moderate: bind9.16 security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:05:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind9.16 security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)
* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2792" id="RHSA-2023:2792" type="rhsa" title="RHSA-2023:2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3736" id="CVE-2022-3736" type="cve" title="CVE-2022-3736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3924" id="CVE-2022-3924" type="cve" title="CVE-2022-3924"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164038" id="2164038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164039" id="2164039" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2792.html" id="ALSA-2023:2792" type="self" title="ALSA-2023:2792"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="bind9.16-doc" version="9.16.23" release="0.14.el8" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.14.el8.noarch.rpm</filename>
          <sum type="sha256">18b262dd4ad98ad55add7f007f6933cecb05c939e1cb5eacc32df8c37105a609</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.14.el8" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.14.el8.aarch64.rpm</filename>
          <sum type="sha256">a08b167304571cb78cfeaca1ab67cf3980ba9e2773a7c272b6923a4498e142ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2806</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:05:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2806" id="RHSA-2023:2806" type="rhsa" title="RHSA-2023:2806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2806.html" id="ALSA-2023:2806" type="self" title="ALSA-2023:2806"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="15.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-15.el8.noarch.rpm</filename>
          <sum type="sha256">4cc2d36c586f04600d6dd41d34113ed74876f4116b48cdd088b2ff4782e8abc7</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="15.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-15.el8.aarch64.rpm</filename>
          <sum type="sha256">566cb90399c899f43e889ca242bed04ca531f79555a8b26f3349e8490ca08692</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2810</id>
    <title>Moderate: poppler security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2810" id="RHSA-2023:2810" type="rhsa" title="RHSA-2023:2810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38784" id="CVE-2022-38784" type="cve" title="CVE-2022-38784"/>
      <reference href="https://bugzilla.redhat.com/2124527" id="2124527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2810.html" id="ALSA-2023:2810" type="self" title="ALSA-2023:2810"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="poppler-cpp" version="20.11.0" release="6.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">1b4fe6ae56e590b4472f4222fe3346351694c52d545bd3b3fc4efb0d50e15741</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="6.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">62ebd207f28953d2e1000e9375c44a10e8079af63af53830943bc1cc706541ac</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="6.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-devel-20.11.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">6b04ad400fe6115fd17b57069a71981d077a37072c3dac03d0ccd08094298f82</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="6.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">bb2768d560598e21b91931d4f16c2674b39c96965c81b9e0e1dbe6916e508ed4</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="6.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-6.el8.aarch64.rpm</filename>
          <sum type="sha256">c4095bd7289f0209c6b1aba4ccf41a6ef6ef3140d5d3240b9da9f7d14f460266</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2851</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)
* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)
* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)
* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)
* freerdp: division by zero in urbdrc channel (CVE-2022-39318)
* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)
* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)
* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)
* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2851" id="RHSA-2023:2851" type="rhsa" title="RHSA-2023:2851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39282" id="CVE-2022-39282" type="cve" title="CVE-2022-39282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39283" id="CVE-2022-39283" type="cve" title="CVE-2022-39283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39316" id="CVE-2022-39316" type="cve" title="CVE-2022-39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39317" id="CVE-2022-39317" type="cve" title="CVE-2022-39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39318" id="CVE-2022-39318" type="cve" title="CVE-2022-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39319" id="CVE-2022-39319" type="cve" title="CVE-2022-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39320" id="CVE-2022-39320" type="cve" title="CVE-2022-39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39347" id="CVE-2022-39347" type="cve" title="CVE-2022-39347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41877" id="CVE-2022-41877" type="cve" title="CVE-2022-41877"/>
      <reference href="https://bugzilla.redhat.com/2134713" id="2134713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134717" id="2134717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143642" id="2143642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143643" id="2143643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143644" id="2143644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143645" id="2143645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143646" id="2143646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143647" id="2143647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143648" id="2143648" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2851.html" id="ALSA-2023:2851" type="self" title="ALSA-2023:2851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="freerdp-devel" version="2.2.0" release="10.el8" epoch="2" arch="aarch64" src="freerdp-2.2.0-10.el8.src.rpm">
          <filename>freerdp-devel-2.2.0-10.el8.aarch64.rpm</filename>
          <sum type="sha256">b8a7ec72742e07b91a78faebb857b54b8fc3a27c0a421305de0f3e19b9ca444a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2863</id>
    <title>Moderate: ctags security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ctags security update</summary>
    <description>Ctags is a C programming language indexing and cross-reference tool.

Security Fix(es):

* ctags: arbitrary command execution via a tag file with a crafted filename (CVE-2022-4515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2863" id="RHSA-2023:2863" type="rhsa" title="RHSA-2023:2863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4515" id="CVE-2022-4515" type="cve" title="CVE-2022-4515"/>
      <reference href="https://bugzilla.redhat.com/2153519" id="2153519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2863.html" id="ALSA-2023:2863" type="self" title="ALSA-2023:2863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="ctags-etags" version="5.8" release="23.el8" epoch="0" arch="aarch64" src="ctags-5.8-23.el8.src.rpm">
          <filename>ctags-etags-5.8-23.el8.aarch64.rpm</filename>
          <sum type="sha256">71033add3b91be3398ae7afe3154a95b2692529a4de5299aac4d1766823b44b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2883</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
* libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2883" id="RHSA-2023:2883" type="rhsa" title="RHSA-2023:2883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3627" id="CVE-2022-3627" type="cve" title="CVE-2022-3627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3970" id="CVE-2022-3970" type="cve" title="CVE-2022-3970"/>
      <reference href="https://bugzilla.redhat.com/2142742" id="2142742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148918" id="2148918" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2883.html" id="ALSA-2023:2883" type="self" title="ALSA-2023:2883"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libtiff-tools" version="4.0.9" release="27.el8" epoch="0" arch="aarch64" src="libtiff-4.0.9-27.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-27.el8.aarch64.rpm</filename>
          <sum type="sha256">ae0fc80cf9c5dc40ed62b5e896bdf186f0fbf662ea73a628626570803287c0ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2948</id>
    <title>Moderate: device-mapper-multipath security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>device-mapper-multipath security and bug fix update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2948" id="RHSA-2023:2948" type="rhsa" title="RHSA-2023:2948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41973" id="CVE-2022-41973" type="cve" title="CVE-2022-41973"/>
      <reference href="https://bugzilla.redhat.com/2123894" id="2123894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2948.html" id="ALSA-2023:2948" type="self" title="ALSA-2023:2948"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.4" release="37.el8" epoch="0" arch="aarch64" src="device-mapper-multipath-0.8.4-37.el8.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.4-37.el8.aarch64.rpm</filename>
          <sum type="sha256">18717375695020e101416e98dab41333395d39d6b41d7b2f32033c8b1aaa567d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2951</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

The following packages have been upgraded to a later upstream version: kernel (4.18.0). (BZ#2122230, BZ#2122267)

Security Fix(es):

* use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)
* net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)
* hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch (CVE-2021-26341)
* malicious data for FBIOPUT_VSCREENINFO ioctl may cause OOB write memory (CVE-2021-33655)
* when setting font with malicious data by ioctl PIO_FONT, kernel will write memory out of bounds (CVE-2021-33656)
* possible race condition in drivers/tty/tty_buffers.c (CVE-2022-1462)
* use-after-free in ath9k_htc_probe_device() could cause an escalation of privileges (CVE-2022-1679)
* KVM: NULL pointer dereference in kvm_mmu_invpcid_gva (CVE-2022-1789)
* KVM: nVMX: missing IBPB when exiting from nested guest can lead to Spectre v2 attacks (CVE-2022-2196)
* netfilter: nf_conntrack_irc message handling issue (CVE-2022-2663)
* race condition in xfrm_probe_algs can lead to OOB read/write (CVE-2022-3028)
* media: em28xx: initialize refcount before kref_get (CVE-2022-3239)
* race condition in hugetlb_no_page() in mm/hugetlb.c (CVE-2022-3522)
* memory leak in ipv6_renew_options() (CVE-2022-3524)
* data races around icsk-&gt;icsk_af_ops in do_ipv6_setsockopt (CVE-2022-3566)
* data races around sk-&gt;sk_prot (CVE-2022-3567)
* memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (CVE-2022-3619)
* denial of service in follow_page_pte in mm/gup.c due to poisoned pte entry (CVE-2022-3623)
* use-after-free after failed devlink reload in devlink_param_get (CVE-2022-3625)
* USB-accessible buffer overflow in brcmfmac (CVE-2022-3628)
* Double-free in split_2MB_gtt_entry when function intel_gvt_dma_map_guest_page failed (CVE-2022-3707)
* l2tp: missing lock when clearing sk_user_data can lead to NULL pointer dereference (CVE-2022-4129)
* igmp: use-after-free in ip_check_mc_rcu when opening and closing inet sockets (CVE-2022-20141)
* Executable Space Protection Bypass (CVE-2022-25265)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)
* unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry (CVE-2022-39188)
* TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED leading to guest malfunctioning (CVE-2022-39189)
* Report vmalloc UAF in dvb-core/dmxdev (CVE-2022-41218)
* u8 overflow problem in cfg80211_update_notlisted_nontrans() (CVE-2022-41674)
* use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)
* use-after-free in bss_ref_get in net/wireless/scan.c (CVE-2022-42720)
* BSS list corruption in cfg80211_add_nontrans_list in net/wireless/scan.c (CVE-2022-42721)
* Denial of service in beacon protection for P2P-device (CVE-2022-42722)
* memory corruption in usbmon driver (CVE-2022-43750)
* NULL pointer dereference in traffic control subsystem (CVE-2022-47929)
* NULL pointer dereference in rawv6_push_pending_frames (CVE-2023-0394)
* use-after-free caused by invalid pointer hostname in fs/cifs/connect.c (CVE-2023-1195)
* Soft lockup occurred during __page_mapcount (CVE-2023-1582)
* slab-out-of-bounds read vulnerabilities in cbq_classify (CVE-2023-23454)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2951" id="RHSA-2023:2951" type="rhsa" title="RHSA-2023:2951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-26341" id="CVE-2021-26341" type="cve" title="CVE-2021-26341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33655" id="CVE-2021-33655" type="cve" title="CVE-2021-33655"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33656" id="CVE-2021-33656" type="cve" title="CVE-2021-33656"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1462" id="CVE-2022-1462" type="cve" title="CVE-2022-1462"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1679" id="CVE-2022-1679" type="cve" title="CVE-2022-1679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1789" id="CVE-2022-1789" type="cve" title="CVE-2022-1789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-20141" id="CVE-2022-20141" type="cve" title="CVE-2022-20141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2196" id="CVE-2022-2196" type="cve" title="CVE-2022-2196"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25265" id="CVE-2022-25265" type="cve" title="CVE-2022-25265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2663" id="CVE-2022-2663" type="cve" title="CVE-2022-2663"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3028" id="CVE-2022-3028" type="cve" title="CVE-2022-3028"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30594" id="CVE-2022-30594" type="cve" title="CVE-2022-30594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3239" id="CVE-2022-3239" type="cve" title="CVE-2022-3239"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3522" id="CVE-2022-3522" type="cve" title="CVE-2022-3522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3524" id="CVE-2022-3524" type="cve" title="CVE-2022-3524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3564" id="CVE-2022-3564" type="cve" title="CVE-2022-3564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3566" id="CVE-2022-3566" type="cve" title="CVE-2022-3566"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3567" id="CVE-2022-3567" type="cve" title="CVE-2022-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3619" id="CVE-2022-3619" type="cve" title="CVE-2022-3619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3623" id="CVE-2022-3623" type="cve" title="CVE-2022-3623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3625" id="CVE-2022-3625" type="cve" title="CVE-2022-3625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3628" id="CVE-2022-3628" type="cve" title="CVE-2022-3628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3707" id="CVE-2022-3707" type="cve" title="CVE-2022-3707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39188" id="CVE-2022-39188" type="cve" title="CVE-2022-39188"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39189" id="CVE-2022-39189" type="cve" title="CVE-2022-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41218" id="CVE-2022-41218" type="cve" title="CVE-2022-41218"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4129" id="CVE-2022-4129" type="cve" title="CVE-2022-4129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41674" id="CVE-2022-41674" type="cve" title="CVE-2022-41674"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42703" id="CVE-2022-42703" type="cve" title="CVE-2022-42703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42720" id="CVE-2022-42720" type="cve" title="CVE-2022-42720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42721" id="CVE-2022-42721" type="cve" title="CVE-2022-42721"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42722" id="CVE-2022-42722" type="cve" title="CVE-2022-42722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-43750" id="CVE-2022-43750" type="cve" title="CVE-2022-43750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47929" id="CVE-2022-47929" type="cve" title="CVE-2022-47929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0394" id="CVE-2023-0394" type="cve" title="CVE-2023-0394"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0461" id="CVE-2023-0461" type="cve" title="CVE-2023-0461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1195" id="CVE-2023-1195" type="cve" title="CVE-2023-1195"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1582" id="CVE-2023-1582" type="cve" title="CVE-2023-1582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23454" id="CVE-2023-23454" type="cve" title="CVE-2023-23454"/>
      <reference href="https://bugzilla.redhat.com/2055499" id="2055499" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2061703" id="2061703" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2078466" id="2078466" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2084125" id="2084125" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2085300" id="2085300" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2090723" id="2090723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108691" id="2108691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2108696" id="2108696" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2114937" id="2114937" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122228" id="2122228" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122960" id="2122960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2123056" id="2123056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2124788" id="2124788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2127985" id="2127985" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2130141" id="2130141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133483" id="2133483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134377" id="2134377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134451" id="2134451" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134506" id="2134506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134517" id="2134517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134528" id="2134528" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2137979" id="2137979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143893" id="2143893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143943" id="2143943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144720" id="2144720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150947" id="2150947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150960" id="2150960" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150979" id="2150979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150999" id="2150999" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151270" id="2151270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154171" id="2154171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154235" id="2154235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160023" id="2160023" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2162120" id="2162120" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165721" id="2165721" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168246" id="2168246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168297" id="2168297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176192" id="2176192" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2180936" id="2180936" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2951.html" id="ALSA-2023:2951" type="self" title="ALSA-2023:2951"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="477.10.1.el8_8" epoch="0" arch="aarch64" src="kernel-4.18.0-477.10.1.el8_8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-477.10.1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">b8fe8fef78de414b50e03c5b63c2b28f9a8b45f7cbac651289cf3aa78eb79ee1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2987</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2132051)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2987" id="RHSA-2023:2987" type="rhsa" title="RHSA-2023:2987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2987.html" id="ALSA-2023:2987" type="self" title="ALSA-2023:2987"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="samba-devel" version="4.17.5" release="2.el8" epoch="0" arch="aarch64" src="samba-4.17.5-2.el8.src.rpm">
          <filename>samba-devel-4.17.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">18638137179211dcfd9707a71d203d92d93fc7e5a2c2be5d5555900450b95559</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="2.el8" epoch="0" arch="aarch64" src="samba-4.17.5-2.el8.src.rpm">
          <filename>libwbclient-devel-4.17.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">776819c99e15f8c283ffbe442b7442074c2442d5fc387b806398b2e5a93498a0</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="2.el8" epoch="0" arch="aarch64" src="samba-4.17.5-2.el8.src.rpm">
          <filename>libnetapi-devel-4.17.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">825c5ac0a470fd695c26b535e58e9fc30ecc0c05fef7dc6f7b5935f22a309b0b</sum>
        </package>
        <package name="python3-samba-devel" version="4.17.5" release="2.el8" epoch="0" arch="aarch64" src="samba-4.17.5-2.el8.src.rpm">
          <filename>python3-samba-devel-4.17.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8fb4d37cd4c42204591fd79743ea3cdc0623966c0997ebad7ba8a4796aa761c5</sum>
        </package>
        <package name="libsmbclient-devel" version="4.17.5" release="2.el8" epoch="0" arch="aarch64" src="samba-4.17.5-2.el8.src.rpm">
          <filename>libsmbclient-devel-4.17.5-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ca9644b13eafd607be8501a25f80a0dbec986c8fe546b18e0ca6746d861f6e2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3018</id>
    <title>Low: libarchive security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:08"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3018" id="RHSA-2023:3018" type="rhsa" title="RHSA-2023:3018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36227" id="CVE-2022-36227" type="cve" title="CVE-2022-36227"/>
      <reference href="https://bugzilla.redhat.com/2144972" id="2144972" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3018.html" id="ALSA-2023:3018" type="self" title="ALSA-2023:3018"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libarchive-devel" version="3.3.3" release="5.el8" epoch="0" arch="aarch64" src="libarchive-3.3.3-5.el8.src.rpm">
          <filename>libarchive-devel-3.3.3-5.el8.aarch64.rpm</filename>
          <sum type="sha256">f6f2134bf137df6550e76d88c93f739c29a6396d56a7a2af9887ac5c1f5fbb3d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3067</id>
    <title>Moderate: autotrace security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>autotrace security update</summary>
    <description>AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3067" id="RHSA-2023:3067" type="rhsa" title="RHSA-2023:3067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32323" id="CVE-2022-32323" type="cve" title="CVE-2022-32323"/>
      <reference href="https://bugzilla.redhat.com/2107471" id="2107471" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3067.html" id="ALSA-2023:3067" type="self" title="ALSA-2023:3067"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="autotrace" version="0.31.1" release="55.el8" epoch="0" arch="aarch64" src="autotrace-0.31.1-55.el8.src.rpm">
          <filename>autotrace-0.31.1-55.el8.aarch64.rpm</filename>
          <sum type="sha256">2b58af203751c8fa23b751c31bff9811d184697797e4b6da7adcf481c2aeb9e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3349</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-05-30 00:00:00"/>
    <updated date="2023-06-05 08:13:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation (CVE-2023-32233)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The qede driver changes rx-usecs: to 256 causing performance impact (BZ#2176104)
* Intel QAT Update - (kernel changes) (BZ#2176850)
* In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181730)
* "smpboot: Scheduler frequency invariance went wobbly, disabling!" on nohz_full CPUs after long run (BZ#2188067)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3349" id="RHSA-2023:3349" type="rhsa" title="RHSA-2023:3349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32233" id="CVE-2023-32233" type="cve" title="CVE-2023-32233"/>
      <reference href="https://bugzilla.redhat.com/2196105" id="2196105" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3349.html" id="ALSA-2023:3349" type="self" title="ALSA-2023:3349"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="477.13.1.el8_8" epoch="0" arch="aarch64" src="kernel-4.18.0-477.13.1.el8_8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-477.13.1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">bf0a17052a359a44fb3f9ff8accd43ff5a9e9ce087a865343e963b1f95af2e7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3425</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 06:02:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3425" id="RHSA-2023:3425" type="rhsa" title="RHSA-2023:3425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805"/>
      <reference href="https://bugzilla.redhat.com/2203051" id="2203051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3425.html" id="ALSA-2023:3425" type="self" title="ALSA-2023:3425"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="cups-filters-devel" version="1.20.0" release="29.el8_8.2" epoch="0" arch="aarch64" src="cups-filters-1.20.0-29.el8_8.2.src.rpm">
          <filename>cups-filters-devel-1.20.0-29.el8_8.2.aarch64.rpm</filename>
          <sum type="sha256">34a6f69c12ec214ab5b59a40ab6e5a6824c2a6d39793b2cdec7f6df7e3b2b26b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3582</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-24 08:08:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212378)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3582" id="RHSA-2023:3582" type="rhsa" title="RHSA-2023:3582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3582.html" id="ALSA-2023:3582" type="self" title="ALSA-2023:3582"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.118" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.118-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">76d7aec835d32a5093521923410e770eda024e3d2184cb37e13b086b96945ef0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3593</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 14:06:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211876)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3593" id="RHSA-2023:3593" type="rhsa" title="RHSA-2023:3593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32032" id="CVE-2023-32032" type="cve" title="CVE-2023-32032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212615" id="2212615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3593.html" id="ALSA-2023:3593" type="self" title="ALSA-2023:3593"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.107" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.107-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">42d030be112bc947cde3e440f8596c979b6dd55c38a3716c14e2d80ad3f7ef93</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3594</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-22 12:05:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3594" id="RHSA-2023:3594" type="rhsa" title="RHSA-2023:3594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3594.html" id="ALSA-2023:3594" type="self" title="ALSA-2023:3594"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="python3.11-debug" version="3.11.2" release="2.el8_8.1" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el8_8.1.aarch64.rpm</filename>
          <sum type="sha256">7812da7813817c7c591e499cc46373761bbcf763d5ca06fdd0fa12451970e3ad</sum>
        </package>
        <package name="python3.11-idle" version="3.11.2" release="2.el8_8.1" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el8_8.1.aarch64.rpm</filename>
          <sum type="sha256">79b038ef865fa35554cac7c7fc041dc6a1bd4b93d685275d788030b7bf12254e</sum>
        </package>
        <package name="python3.11-test" version="3.11.2" release="2.el8_8.1" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-test-3.11.2-2.el8_8.1.aarch64.rpm</filename>
          <sum type="sha256">7ffc809d748829ed90a4380c91db8a6d9a288b6c66536cbaec5578edf2bb8c55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3781</id>
    <title>Important: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2023-06-22 00:00:00"/>
    <updated date="2023-06-30 15:17:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3781" id="RHSA-2023:3781" type="rhsa" title="RHSA-2023:3781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3781.html" id="ALSA-2023:3781" type="self" title="ALSA-2023:3781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="python38" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3811</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-30 15:49:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3811" id="RHSA-2023:3811" type="rhsa" title="RHSA-2023:3811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3811.html" id="ALSA-2023:3811" type="self" title="ALSA-2023:3811"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8080020230630114612" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-debug" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="aarch64" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-debug-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.aarch64.rpm</filename>
          <sum type="sha256">cccfc114e8b41e704e5096651515a40b4497f2b724bc71f30bc5346787bf7b35</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3822</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-07-15 00:07:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Logs are spammed with ' Domain id=7 is tainted: custom-ga-command' message (BZ#2180030)
* [qemu] snapshot is failing with error libvirt.libvirtError: internal error: QEMU monitor reply exceeds buffer size (10485760 bytes) (BZ#2181575)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3822" id="RHSA-2023:3822" type="rhsa" title="RHSA-2023:3822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700"/>
      <reference href="https://bugzilla.redhat.com/2203653" id="2203653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3822.html" id="ALSA-2023:3822" type="self" title="ALSA-2023:3822"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220510122810" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-32.module_el8.8.0+3553+bd08596b.aarch64.rpm</filename>
          <sum type="sha256">7f5b62e993ccfffabf49f89ae793eee1c4dd1d66ab110028d82e775425727735</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3827</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-29 13:24:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3827" id="RHSA-2023:3827" type="rhsa" title="RHSA-2023:3827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281"/>
      <reference href="https://bugzilla.redhat.com/2163606" id="2163606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3827.html" id="ALSA-2023:3827" type="self" title="ALSA-2023:3827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libtiff-tools" version="4.0.9" release="28.el8_8" epoch="0" arch="aarch64" src="libtiff-4.0.9-28.el8_8.src.rpm">
          <filename>libtiff-tools-4.0.9-28.el8_8.aarch64.rpm</filename>
          <sum type="sha256">60e656a1b88d54a490fefa9984b3502c7b2b942239602bdf30a492071665b1bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3847</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-07-24 14:20:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference (CVE-2023-28466)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3847" id="RHSA-2023:3847" type="rhsa" title="RHSA-2023:3847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28466" id="CVE-2023-28466" type="cve" title="CVE-2023-28466"/>
      <reference href="https://bugzilla.redhat.com/2179000" id="2179000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3847.html" id="ALSA-2023:3847" type="self" title="ALSA-2023:3847"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="477.15.1.el8_8" epoch="0" arch="aarch64" src="kernel-4.18.0-477.15.1.el8_8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-477.15.1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">8fc6a54cbc4d987ac472c4e56c3bd0d4b11656f2c87db92ae0c227627831f892</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4058</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:09:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219633)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4058" id="RHSA-2023:4058" type="rhsa" title="RHSA-2023:4058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4058.html" id="ALSA-2023:4058" type="self" title="ALSA-2023:4058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.109" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">75924653010124a7fe900487253f633592c82f72c1eaf2374b1ec3cbf285c24b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4059</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:31:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219639)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4059" id="RHSA-2023:4059" type="rhsa" title="RHSA-2023:4059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4059.html" id="ALSA-2023:4059" type="self" title="ALSA-2023:4059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.120" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.120-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">77ee686778af64fb66d75c9801769f0c729422f9c874d418debf7eae8f8f45e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4100</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 07:27:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4100" id="RHSA-2023:4100" type="rhsa" title="RHSA-2023:4100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4100.html" id="ALSA-2023:4100" type="self" title="ALSA-2023:4100"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8_8.1.alma.noarch.rpm</filename>
          <sum type="sha256">5a9770a9790cafeb0aa3b909d6ec3e61c6900cb4d48478b99b49dab10323d351</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8_8.1.alma.aarch64.rpm</filename>
          <sum type="sha256">85c8a811f781be4fd9a1a5b3732d72f259229d4efd82ba8d6282b05b3755a2bb</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.14.el8_8.1.alma.aarch64.rpm</filename>
          <sum type="sha256">e52df03a56e79fe1701b07dcad817b5a6975e72cb91b4221aee2fcfe89613e11</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.14.el8_8.1.alma.noarch.rpm</filename>
          <sum type="sha256">e7bc9f4c628191bea58f796407f64bbd135aceda871cf34bb4ef09f776c46d9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4159</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 18:32:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221655)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-8] (BZ#2222368)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4159" id="RHSA-2023:4159" type="rhsa" title="RHSA-2023:4159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22044" id="CVE-2023-22044" type="cve" title="CVE-2023-22044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221642" id="2221642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4159.html" id="ALSA-2023:4159" type="self" title="ALSA-2023:4159"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0aa88ad57d1932139a8854a10cd029643d8e3ea47ae05eebb042d024082b2397</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0c8b7c279b431a59f0be9c52ea8a1e762d6b2ac99bae2caa50fd48560652334f</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">117ac263b937b9914883841739a90b1bb515c2f3d99b359c0b96e3187a2cd1fb</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">15c6dedea7b20b87e703e4e5e6f26874eb656cd91fe3bc0820c465bd4625e43f</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3f0862b6e76f623a36409f0ca2c8711431e5e6ac9f775598476774d3a01fb496</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">50a4ef4b8598d7315ec05006842b33500f49d7f0a15d2a8999c16149af73d9d6</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5605a3b1b591df32eac4f2666fc7b73964b102a342828a7684f67ba05fcd9d2b</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">a9bc666fdafc8378193d69fa2af062283390344a46deb05e84aee73b74b72463</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b4a050f16156f13bacb89066739626bd002a69d8286da1a84d94d52ff60180ec</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d5f41d37bd38d5e532f79c529d02d8656500cb883ba85272562b2914fcae33ea</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">dbc41efbc24faae3b004d2eac2b60254870e5617ca315c4e8ab4b49d4c82f331</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e8a29b3c2cfc949fb3585731c91a3951fc28ba646a1459b0b2bea45c06e9addd</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ef18e0b22d2e938e0b01de8eba3572f21be826d2930ad3949129d88ddfa8c9b7</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f9c46c50c20606f3b30eeb5a8408723bd2b2eb217877b703493f73a14186ac55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4175</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 18:19:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A virtual machine crash was observed in JDK 11.0.19 when executing the GregorianCalender.computeTime() method (JDK-8307683). It was found
that although the root cause of the crash is an old issue, a recent fix for a rare issue in the C2 compiler (JDK-8297951) made the crash much more likely. To mitigate this, the fix has been reverted in JDK 11.0.20 and will be reapplied once JDK-8307683 is resolved. (RHBZ#2222493)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-8] (BZ#2223101)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4175" id="RHSA-2023:4175" type="rhsa" title="RHSA-2023:4175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4175.html" id="ALSA-2023:4175" type="self" title="ALSA-2023:4175"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0683089fe31da591fa6764011f5e8973a451f942f44b8cb35e2dc3d784a9c31d</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">102617ad7dbf7b8fe805b88b40b8ef9b7db8431161d78b32cba4e51bfded93c7</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">26faa3d69b03035b9fde3eb60a6eff5ea6c5a2c4389f843159f0bc02cc7f1191</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">38d44361174d9696ce8a34c6a30c0b611285935aa08f18315946c50063249390</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">39b25dea9144e738bb58c48724ed800680fe93bb21789f7a4451e0cf6c254949</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">48c8efa26716dabc488dfa6ca74b0a62107255ceaa7ebcf4e723659eba6c37af</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">548e80882291381656ea44cbedb9a99061a12a669a2d9971746a478057bdecaa</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8d27e9aa38b01823d2df44b02308883e1d26b184e113255df7871a25e4c1a343</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8dc8b58f9008676d579b0ea895d6d62a5df58cc2f275619a0d1113d5281b27b7</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b25bbaf0c449ec410f7e522dcf0995858f156e304439e36c26e9af65d8f124a3</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b807b86fe487bff5e498949a3e626ad23b6fda07158f2ab6d38495285785997e</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b8705db333fe97de7d62c363b6328906327484e89ea89525306509cf638a63b6</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c05e845d3958b05deb19fd612114269e327b66b515ea37bbaea23ed664ae3100</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ef743463729fc28f9e7ba70c1ba3909f214a7aeb90aa7ecb9aeaf9793cfee101</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4176</id>
    <title>Moderate: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 15:45:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-8] (BZ#2219727)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4176" id="RHSA-2023:4176" type="rhsa" title="RHSA-2023:4176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4176.html" id="ALSA-2023:4176" type="self" title="ALSA-2023:4176"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">09908ac6b0c9d23552ac3c254c71be18120ae6840369b8ce408aa1e08eff59b8</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1e4c1e4fe2e7f437442da23ffef7b535d968fb267ac39c14640ff60b181e2769</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2f1b00e9d37243e3041a018f909a8957b13f06be2baae053eaf2095d52601852</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">34e0908e56eb53747f1036c43a654564db2c9d8283ef134117d8133bfaf69523</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">433dda6d0b90511f0f1b9c8c6ed5eda8ed45839312425e8154547dee609d3ef5</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">500b148115d67144b887d5992d079f7ad7c23a9b34256cf23e7a7174b9dc6ca7</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">95957af354e0c37c8cf420df1acc2190cab725a47e223ac5c065d4594597da61</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">96d4fb7f4a28a459b8f24b4d6095f3300a25cf5e0e310fd48f7bbf4270ef0bb1</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9d1cd85c092693e7602a825c5b7987abd83a302d755361ae8eaf4c188ebb41c9</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c1c6d78d9820cc9556fd0d3d92a39c55d27af5e5bd273eac1696c0a205a19047</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cf11c152a3a74edba0297a6588f9b4b483b85760d9bcb4e1c425ce40ef92820c</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.382.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.382.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.382.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d9f347876b615dbf4d51915e38a9d3e761e794613dfb4e6636d0b470a124b018</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4328</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 10:23:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223601)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4328" id="RHSA-2023:4328" type="rhsa" title="RHSA-2023:4328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4328.html" id="ALSA-2023:4328" type="self" title="ALSA-2023:4328"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libnetapi-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="aarch64" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>libnetapi-devel-4.17.5-3.el8_8.alma.aarch64.rpm</filename>
          <sum type="sha256">1f06ef540405902cb65472651a7d2d4415ef0e4d162ff1d1e1a700218a8383fb</sum>
        </package>
        <package name="libsmbclient-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="aarch64" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>libsmbclient-devel-4.17.5-3.el8_8.alma.aarch64.rpm</filename>
          <sum type="sha256">7ec9e839c2bbbb2fb0dae0ea15899e5cd4cee26cd87a6826d7cdad259896f072</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="aarch64" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>samba-devel-4.17.5-3.el8_8.alma.aarch64.rpm</filename>
          <sum type="sha256">9e7dda37a61b1f28751632dcd7669bac7a95d6f7152820f6b51bb627684b0583</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="aarch64" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>libwbclient-devel-4.17.5-3.el8_8.alma.aarch64.rpm</filename>
          <sum type="sha256">b8ee94482691ece3fa8e80b0891faa310d4fe6f2cc007cfd4871fb285cb0d1be</sum>
        </package>
        <package name="python3-samba-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="aarch64" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>python3-samba-devel-4.17.5-3.el8_8.alma.aarch64.rpm</filename>
          <sum type="sha256">ce3746f8e5e61512566f4d89d3d0215d3b55905dec7a764c61f73a0ef6084b17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4517</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-08-08 00:00:00"/>
    <updated date="2023-08-11 09:29:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022-42896)
* kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation (CVE-2023-1281)
* kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)
* kernel: use-after-free vulnerability in the perf_group_detach function of the Linux Kernel Performance Events (CVE-2023-2235)
* kernel: OOB access in the Linux kernel's XFS subsystem (CVE-2023-2124)
* kernel: i2c: out-of-bounds write in xgene_slimpro_i2c_xfer() (CVE-2023-2194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4517" id="RHSA-2023:4517" type="rhsa" title="RHSA-2023:4517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42896" id="CVE-2022-42896" type="cve" title="CVE-2022-42896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1281" id="CVE-2023-1281" type="cve" title="CVE-2023-1281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1829" id="CVE-2023-1829" type="cve" title="CVE-2023-1829"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2124" id="CVE-2023-2124" type="cve" title="CVE-2023-2124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2194" id="CVE-2023-2194" type="cve" title="CVE-2023-2194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2235" id="CVE-2023-2235" type="cve" title="CVE-2023-2235"/>
      <reference href="https://bugzilla.redhat.com/2147364" id="2147364" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2181847" id="2181847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187439" id="2187439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188396" id="2188396" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188470" id="2188470" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192589" id="2192589" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4517.html" id="ALSA-2023:4517" type="self" title="ALSA-2023:4517"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="477.21.1.el8_8" epoch="0" arch="aarch64" src="kernel-4.18.0-477.21.1.el8_8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-477.21.1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">3197635fe70301079da71d5e1c0a3207f33751a35215e37f270fe58c936743c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4643</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:34:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4643" id="RHSA-2023:4643" type="rhsa" title="RHSA-2023:4643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4643.html" id="ALSA-2023:4643" type="self" title="ALSA-2023:4643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.110" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.110-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">bfa4e3cc1feef790186ec49a76288cd43d4f2a8c54c8ac4de0d4326bcc9e5821</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4645</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:08:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4645" id="RHSA-2023:4645" type="rhsa" title="RHSA-2023:4645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4645.html" id="ALSA-2023:4645" type="self" title="ALSA-2023:4645"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.121" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.121-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">97c047562218acc68cb21857688c86d3372342cf86248c17e5e11f7e2f9aabf7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5046</id>
    <title>Important: flac security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 10:20:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5046" id="RHSA-2023:5046" type="rhsa" title="RHSA-2023:5046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-22219" id="CVE-2020-22219" type="cve" title="CVE-2020-22219"/>
      <reference href="https://bugzilla.redhat.com/2235489" id="2235489" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5046.html" id="ALSA-2023:5046" type="self" title="ALSA-2023:5046"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="flac" version="1.3.2" release="9.el8_8.1" epoch="0" arch="aarch64" src="flac-1.3.2-9.el8_8.1.src.rpm">
          <filename>flac-1.3.2-9.el8_8.1.aarch64.rpm</filename>
          <sum type="sha256">6d4e490b741de4ae73f8d6af2641113620cea04250f7d170ee5d99518f284642</sum>
        </package>
        <package name="flac-devel" version="1.3.2" release="9.el8_8.1" epoch="0" arch="aarch64" src="flac-1.3.2-9.el8_8.1.src.rpm">
          <filename>flac-devel-1.3.2-9.el8_8.1.aarch64.rpm</filename>
          <sum type="sha256">9e03e4a6dfdd06f81d9424e5bd35ac55ece1f33ae3598344438a1a7d84722716</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5144</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 11:00:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5144" id="RHSA-2023:5144" type="rhsa" title="RHSA-2023:5144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5144.html" id="ALSA-2023:5144" type="self" title="ALSA-2023:5144"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.122" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">7b3b048123726f5935f0e494996b859964eb7a34f4a8785b664a7172f2a7d703</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5145</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:22:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5145" id="RHSA-2023:5145" type="rhsa" title="RHSA-2023:5145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5145.html" id="ALSA-2023:5145" type="self" title="ALSA-2023:5145"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.111" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.111-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">de5913f3f1adcd5df8b9099e8ba56e8c6c994d313b5c5827913a1cbacf120304</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5244</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-10-03 18:42:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: ipvlan: out-of-bounds write caused by unclear skb-&gt;cb (CVE-2023-3090)
* kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests (CVE-2023-3390)
* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)
* kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)
* kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() (CVE-2023-35001)
* kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)
* kernel: bluetooth: Unauthorized management command execution (CVE-2023-2002)
* hw: amd: Cross-Process Information Leak (CVE-2023-20593)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* low memory deadlock with md devices and external (imsm) metadata handling - requires a kernfs notification backport (BZ#2208540)
* Intel 8.9 BUG, SPR EMR FHF ACPI: Fix system hang during S3 wakeup (BZ#2218025)
* OCS 4.8, cephfs kernel crash:  mds_dispatch ceph_handle_snap unable to handle kernel NULL (BZ#2218271)
* st_gmac: tx-checksum offload on vlan is not consistent with st_gmac interface (BZ#2219907)
* refcount_t overflow often happens in mem_cgroup_id_get_online() (BZ#2221010)
* avoid unnecessary page fault retires on shared memory types (BZ#2221100)
* enable conntrack clash resolution for GRE (BZ#2223542)
* ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (BZ#2224515)
* libceph: harden msgr2.1 frame segment length checks [8.x] (BZ#2227073)
* Important iavf bug fixes July 2023 (BZ#2228161)
* i40e error: Cannot set interface MAC/vlanid to 1e:b7:e2:02:b1:aa/0 for ifname ens4f0 vf 0: Resource temporarily unavailable (BZ#2228163)
* oops on cifs_mount due to null tcon (BZ#2229128)
* iptables argument "--suppl-groups" in extension "owner" does not work in AlmaLinux8 (BZ#2229715)
* Hyper-V AlmaLinux 8: incomplete fc_transport implementation in storvsc causes null dereference in fc_timed_out() (BZ#2230743)
* Withdrawal: GFS2: could not freeze filesystem: -16 (BZ#2231825)
* AlmaLinux 8 Hyper-V: Excessive hv_storvsc driver logging with srb_status  SRB_STATUS_INTERNAL_ERROR  (0x30) (BZ#2231988)
* AlmaLinux-8: crypto: rng - Fix lock imbalance in crypto_del_rng (BZ#2232215)
* Intel 8.9 iavf: Driver Update (BZ#2232399)
* Hyper-V AlmaLinux-8 hv_storvsc driver logging excessive storvsc_log events for storvsc_on_io_completion() function (BZ#2233227)

Enhancement(s):

* Intel 8.9 FEAT, EMR perf: Add EMR CPU PMU support (BZ#2230152)
* Intel 8.9 FEAT, SPR EMR power: Add uncore frequency control driver (BZ#2230158)
* Intel 8.9 FEAT EMR perf: RAPL PMU support on EMR (BZ#2230162)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5244" id="RHSA-2023:5244" type="rhsa" title="RHSA-2023:5244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2002" id="CVE-2023-2002" type="cve" title="CVE-2023-2002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20593" id="CVE-2023-20593" type="cve" title="CVE-2023-20593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3090" id="CVE-2023-3090" type="cve" title="CVE-2023-3090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3390" id="CVE-2023-3390" type="cve" title="CVE-2023-3390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35001" id="CVE-2023-35001" type="cve" title="CVE-2023-35001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35788" id="CVE-2023-35788" type="cve" title="CVE-2023-35788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3776" id="CVE-2023-3776" type="cve" title="CVE-2023-3776"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4004" id="CVE-2023-4004" type="cve" title="CVE-2023-4004"/>
      <reference href="https://bugzilla.redhat.com/2187308" id="2187308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213260" id="2213260" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215768" id="2215768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2217845" id="2217845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218672" id="2218672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2220892" id="2220892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225097" id="2225097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225275" id="2225275" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5244.html" id="ALSA-2023:5244" type="self" title="ALSA-2023:5244"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="477.27.2.el8_8" epoch="0" arch="aarch64" src="kernel-4.18.0-477.27.2.el8_8.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-477.27.2.el8_8.aarch64.rpm</filename>
          <sum type="sha256">9f2b5ed1945039cef6a8aaab9987ef69d354d4171af14bd7e9116f6714a02d3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5264</id>
    <title>Important: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-22 15:41:13"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)
* NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* "No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks. (BZ#2228485)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5264" id="RHSA-2023:5264" type="rhsa" title="RHSA-2023:5264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40284" id="CVE-2022-40284" type="cve" title="CVE-2022-40284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3354" id="CVE-2023-3354" type="cve" title="CVE-2023-3354"/>
      <reference href="https://bugzilla.redhat.com/2216478" id="2216478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236130" id="2236130" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5264.html" id="ALSA-2023:5264" type="self" title="ALSA-2023:5264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220510122810" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e315df7aa6b36e6af022359bab14257d6fa112b667a78b24dc217352cb97d2be</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5353</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-09-26 00:00:00"/>
    <updated date="2023-09-27 09:26:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5353" id="RHSA-2023:5353" type="rhsa" title="RHSA-2023:5353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804"/>
      <reference href="https://bugzilla.redhat.com/2170167" id="2170167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170172" id="2170172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170178" id="2170178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170187" id="2170187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170192" id="2170192" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5353.html" id="ALSA-2023:5353" type="self" title="ALSA-2023:5353"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libtiff-tools" version="4.0.9" release="29.el8_8" epoch="0" arch="aarch64" src="libtiff-4.0.9-29.el8_8.src.rpm">
          <filename>libtiff-tools-4.0.9-29.el8_8.aarch64.rpm</filename>
          <sum type="sha256">56e5489cad42bf1dedcc9eb87f04ad3886c8eec218434274e9a11a71601be725</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5455</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-05 23:16:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5455" id="RHSA-2023:5455" type="rhsa" title="RHSA-2023:5455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5455.html" id="ALSA-2023:5455" type="self" title="ALSA-2023:5455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="glibc-static" version="2.28" release="225.el8_8.6" epoch="0" arch="aarch64" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-static-2.28-225.el8_8.6.aarch64.rpm</filename>
          <sum type="sha256">023046574dbeb248c55cbfefa0de9edaf4df75a45552e2871e845b3ea5673047</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="225.el8_8.6" epoch="0" arch="aarch64" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>nss_hesiod-2.28-225.el8_8.6.aarch64.rpm</filename>
          <sum type="sha256">83a6930abe9cbfad381c37a7cfa2eb2d8a748106ab60f052f3d6a96fc0cb5a9f</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="225.el8_8.6" epoch="0" arch="aarch64" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-nss-devel-2.28-225.el8_8.6.aarch64.rpm</filename>
          <sum type="sha256">bf118b9140e6f1afdfeafec166fae9009d09b1fe8ac7114ef5efa9e0e092155b</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="225.el8_8.6" epoch="0" arch="aarch64" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-benchtests-2.28-225.el8_8.6.aarch64.rpm</filename>
          <sum type="sha256">d5945d4529098792e3289c57faaf160713347befd48408336bbb22f763ebd4e8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5460</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:02:11"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5460" id="RHSA-2023:5460" type="rhsa" title="RHSA-2023:5460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5460.html" id="ALSA-2023:5460" type="self" title="ALSA-2023:5460"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">5d84c7719bb5ddba51d00175b26bff26333f6904f08bf6408084927fb24c80c6</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.14.el8_8.2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">7d544316490e43134b586fa486fc596de2c950c29aca69750a391c64bbefa7f5</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.14.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">8e544110bed059bf34466eff737b3a9b9ccada47075189a9d8580dcb84244ce4</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8_8.2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e0422f713a189c46327b236069058f9c393399b4564db2a93a57d80981a85427</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5463</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 09:33:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5463" id="RHSA-2023:5463" type="rhsa" title="RHSA-2023:5463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5463.html" id="ALSA-2023:5463" type="self" title="ALSA-2023:5463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="python3.11-devel" version="3.11.2" release="2.el8_8.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-devel-3.11.2-2.el8_8.2.aarch64.rpm</filename>
          <sum type="sha256">22a4bf018d35ccc7c157fba99f88e7f008373bed63af4d685f7505b9247bd337</sum>
        </package>
        <package name="python3.11-idle" version="3.11.2" release="2.el8_8.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el8_8.2.aarch64.rpm</filename>
          <sum type="sha256">36e7bf9708a6ec0d74299366bae8f3cf4e936caaabfd1f50d7c6e8c4edd12bca</sum>
        </package>
        <package name="python3.11-test" version="3.11.2" release="2.el8_8.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-test-3.11.2-2.el8_8.2.aarch64.rpm</filename>
          <sum type="sha256">53a470f46bb5481d3def4776a2b84ed013c74195a9951a339573f410a05ebc5f</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.2" release="2.el8_8.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-tkinter-3.11.2-2.el8_8.2.aarch64.rpm</filename>
          <sum type="sha256">b26fdbaa22842ce4aeefdfab09f6e25d7b23ccfe04d1bc4c786467ae90b3105f</sum>
        </package>
        <package name="python3.11-debug" version="3.11.2" release="2.el8_8.2" epoch="0" arch="aarch64" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el8_8.2.aarch64.rpm</filename>
          <sum type="sha256">db280c8b443ab77c73837573cd2d4e559c61d82a6018242b22c25dc1b7fe9334</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5537</id>
    <title>Important: libvpx security update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-10 08:12:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5537" id="RHSA-2023:5537" type="rhsa" title="RHSA-2023:5537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5537.html" id="ALSA-2023:5537" type="self" title="ALSA-2023:5537"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libvpx-devel" version="1.7.0" release="10.el8_8.alma.1" epoch="0" arch="aarch64" src="libvpx-1.7.0-10.el8_8.alma.1.src.rpm">
          <filename>libvpx-devel-1.7.0-10.el8_8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">57255797b0ab07cba7ac589745970c749007aa94a73c9eae5def7ff7e496de5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5709</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 11:22:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5709" id="RHSA-2023:5709" type="rhsa" title="RHSA-2023:5709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5709.html" id="ALSA-2023:5709" type="self" title="ALSA-2023:5709"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.112" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.112-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">605924b4434a1add33461fa50fd48e505a0b438a5fda34158f78e79b6d4809f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5710</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-20 06:45:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5710" id="RHSA-2023:5710" type="rhsa" title="RHSA-2023:5710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5710.html" id="ALSA-2023:5710" type="self" title="ALSA-2023:5710"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.123" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">acc655b5c8413bfd6a2f0b458a5ec206e11379a12363be7514af2626abe41f73</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5731</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 14:49:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
* OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13635)
* The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13641)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5731" id="RHSA-2023:5731" type="rhsa" title="RHSA-2023:5731"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40433" id="CVE-2022-40433" type="cve" title="CVE-2022-40433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22067" id="CVE-2023-22067" type="cve" title="CVE-2023-22067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2237709" id="2237709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243637" id="2243637" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5731.html" id="ALSA-2023:5731" type="self" title="ALSA-2023:5731"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">27d498f5694cadf3892ccf5f82e6af45ae1900abd643b9f15a39d2ef79194fe9</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">2a4e0ef70d56dbf07ec9d7e37d7b8314efc5368dec7823814c4aee5d83325fd2</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">364c1e5de88380a93d6097f50b3b29afeeb38d58ab7d624a4792eea388428924</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">3fddc86cceec4a09322fbed5ed39a3c05f5379f81ed47725dab63f6aec2aa65b</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">4b81a846e8e61f0d124d6db6a2adf36b33cda3e700da2d2cd0efe4c5ccaa1ac0</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">78b6baed22602d819d02cb5f89fe1bd7083923eca5296590018d1fdf8409c3d1</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">9c1d94c5848f1bd0ee6e459e5ed1dd63c55cc395862fd45b5de144a92661d76f</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">c993b8eca05b93adb01f6edd2dd3b06e426e4605d7ed9f4deb57549eae27f6be</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">d003bcb9a1228ccaa380fef843d9fe29076f678212b77fa9ff2f4d44c3b9b5cb</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">d3864b6064b03e9b5fd8ee65b38eebb1d61500ef4995e40c39f280316869bb36</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">e576e960cfbf350d8727698524d6635f44a9531e47e41247a82be05796b85903</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.392.b08" release="4.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.392.b08-4.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.392.b08-4.el8.aarch64.rpm</filename>
          <sum type="sha256">eacd5c8d731bbf36eefb16f1fa9a28d23fee0388e34c534e9066799e4f51db04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5742</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 14:22:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237170)
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB.
* The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210, AlmaLinux-2763)
* The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13559)
* The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13566)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5742" id="RHSA-2023:5742" type="rhsa" title="RHSA-2023:5742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5742.html" id="ALSA-2023:5742" type="self" title="ALSA-2023:5742"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">228bdeff0c459f1d21e3593e6781783e62c8e8f54f2f98496f3ba68519626eed</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2e826d19ed4cadbe449fda9ab9e658950c892a7c22ac113145247c1001d59527</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3680b3c943424bca7f4cea50823fe7c92d417598b45d96cc0b46a3fb698050e9</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4c926647ed8bb9747d6a3ae81ce395a925a4e05aba080e5e509902292b0c5b76</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6f9de4920a2b993e0cfc1d4a652c2ed29a87ed6431ff19b5161636e9394431a3</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">776f6af193c94de79472a80e67e40af03970ab16c392c3eba158b2a8213875b6</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7cbafecccafc587903b92ef9804642382812b3492b7dae2b802bf70e13e87cd8</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7fbde196a72f78ab5e9c80bc9ad47b9e71692e3b8abe37e3a970f18270dfdcfb</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ca70ae9afba7d5a57c5c8d8ddf452781843a3491d8759d632010c898948f30d1</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d100cc1f09770ba3c47c93f900d212cfd8efdda30556875306107009edeaa1f8</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d5255b84aa906afef55740eee52a540d2994a95089ca20516392515f01c79e5b</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e01a3be7b945bf0b65b75ddd258cb6faa5dc6b5b69f2e4788be56873cffc0df8</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">eefc438c1c0e223484f0255c740551adad87d7c07f3a56a1656ab72add379131</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.21.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">fd485b7b307b57b5ce713bc11c662202734f5b7bbe95431635cb383375c2d0c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5751</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 13:54:59"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237178)
* The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13708)
* The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13658)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5751" id="RHSA-2023:5751" type="rhsa" title="RHSA-2023:5751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5751.html" id="ALSA-2023:5751" type="self" title="ALSA-2023:5751"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">28316baf221eae1bde54e122fb909aa42d41c70a81c93523243277ac90e043a8</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3dde46c85aef96ca35eb94667600cdccf9ceaf03d022d145108f64af212599b2</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">49db484753cae5b186758ac71c4f0fe177a37cf831828bb7753d4a80c0efefd4</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">55f8124f4e78896237451705b0be4d191e5208e87a77505029a7cddec4d57f5d</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5cc6bae9af6fc3ce258e255680b469e4a27a1a8084f8ca46c34cd5f297e819e3</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">643bb7c37119a697f57be88a9ff6bd6bfaa03e69f3282f7fe2274b7192f8b213</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">68c1509f129c2484af6ba28dd15d8387b5feb1c75a8ffdd5b877c48a3f8b5350</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">83048d2361578402f756e4d738ff197280769b1ac4edc7d5507a4f8b0af45909</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">abcf0828a3689d901ff22232c367203e798cfd19dcb696d432695398c5631495</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b7ab256fc6b36d0ce576c703abad8120db8d275b6a51d4bae048d8540a2d0e6e</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c376805f0da1c8ab26189fef23fe5431806882d1b67de3f3af1e9b084002f9ee</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cc117c9e28d3b6851d7880c50073fca672f5819e60bf5f358c5f82abfd831ab2</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d5dd49b4e891bc48847776c7ed3f32c3ba52cb008473efaa6aafe6db0aa6cac3</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.9.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e9a7249f646273ca4e50e0b8eb7f9abdc53d32f38bb8199551c1901a4e2075e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5837</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 08:08:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>nghttp2 contains the Hypertext Transfer Protocol version 2 (HTTP/2) client, server, and proxy programs as well as a library implementing the HTTP/2 protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5837" id="RHSA-2023:5837" type="rhsa" title="RHSA-2023:5837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5837.html" id="ALSA-2023:5837" type="self" title="ALSA-2023:5837"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="libnghttp2-devel" version="1.33.0" release="5.el8_8" epoch="0" arch="aarch64" src="nghttp2-1.33.0-5.el8_8.src.rpm">
          <filename>libnghttp2-devel-1.33.0-5.el8_8.aarch64.rpm</filename>
          <sum type="sha256">85d12228cee77c02d7a1ac3364e37805b9b7cac155b00b0c3994b75e3b858442</sum>
        </package>
        <package name="nghttp2" version="1.33.0" release="5.el8_8" epoch="0" arch="aarch64" src="nghttp2-1.33.0-5.el8_8.src.rpm">
          <filename>nghttp2-1.33.0-5.el8_8.aarch64.rpm</filename>
          <sum type="sha256">971b6bf5e23497c10bb7079592a6bd808b92ea76b9eef0a154c495b27367cf5a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5998</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-10-23 00:00:00"/>
    <updated date="2023-10-25 07:21:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5998" id="RHSA-2023:5998" type="rhsa" title="RHSA-2023:5998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5998.html" id="ALSA-2023:5998" type="self" title="ALSA-2023:5998"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-debug" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="aarch64" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-debug-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.aarch64.rpm</filename>
          <sum type="sha256">d6cdbd861a6763b01a84b2133ea267d4d01a2168cd1868d83763a7e394004745</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6245</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 10:15:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6245" id="RHSA-2023:6245" type="rhsa" title="RHSA-2023:6245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6245.html" id="ALSA-2023:6245" type="self" title="ALSA-2023:6245"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.124" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.124-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">6a67669b893f5f6d0638f9ed4f19acfdb271d58d459ef648a57ea922e974a33d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6247</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-09 06:18:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6247" id="RHSA-2023:6247" type="rhsa" title="RHSA-2023:6247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6247.html" id="ALSA-2023:6247" type="self" title="ALSA-2023:6247"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_8_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.113" release="1.el8_8" epoch="0" arch="aarch64" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.113-1.el8_8.aarch64.rpm</filename>
          <sum type="sha256">8a300aba88a0354e2e044d5dc74208fe74e030402b1fa9207e40b0aae074a933</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6887</id>
    <title>Moderate: java-21-openjdk security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 10:51:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security and bug fix update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true.
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14952)
* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14961)
* Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14944)
* The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14960)
* The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14950)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6887" id="RHSA-2023:6887" type="rhsa" title="RHSA-2023:6887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6887.html" id="ALSA-2023:6887" type="self" title="ALSA-2023:6887"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="java-21-openjdk-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">234281ead02c877a7ac6aa0975631baf2109d9e2b7e6ae3b51dff452cff3b85b</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">34a3ffd06668816bcfaf751f62740469f9a644fe6c9bb505113836a3a33d835d</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3cdf5b8a6637ddc623d1b7d8c48a640c144c6b621b6cbc9ccbcfe171e40d9fd5</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">4b6530bcb9506be1fba87759cccc9d3775dd4168e41d546e1562d61a642fdc4b</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">5d5e745d1e8e12f8ea5423d6ae6a9a653c94b9093f94ad274e525d0f67372321</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6b99cf7541c7c42ebc1b933f0dda19442eda7309720903d9e82d109cd534b685</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">755f00e941b9b7a0204809e3adf7cf7d3b607086d2e969709f9c51e6a5db2bc5</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">8d842af35025d5a8492e0c4a03ef48283e89daa5d900431aa533355619d908cc</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a3db31825e917b280bb4d07e5313c9cded420ff00fbbf05678bc362823c01cbf</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ab9638ecf7ae47112c111aaa26206b3908e7442a050fa3a5e7b929e9d128ba1c</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">bd22041f16e70cecb37786f8465866f394cabafc1c6ad1f13e2e3489ea9003cf</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">c1f421bca94aed102c1705e60bb0f16c2e07092310c7a733806d7ef590ca5a37</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">cdb99cf1c603b6cd03521d421fb1c1fc4b6a7d4a3ecdc239d042ebcc1514b107</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.1.0.12-2.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e387491f998d3d6408decf303cb8e3d72a9c6b12739d6959188bc26b92d6e508</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6916</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6916" id="RHSA-2023:6916" type="rhsa" title="RHSA-2023:6916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6916.html" id="ALSA-2023:6916" type="self" title="ALSA-2023:6916"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="17.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-17.el8.noarch.rpm</filename>
          <sum type="sha256">df88a75a177c38c6fc2f4ef08f403808e7469ce5574590782cd172152f534b96</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="17.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-17.el8.aarch64.rpm</filename>
          <sum type="sha256">fa6bb19c838aa311624164f4ae3470644ae0d737d4961b0c2d5fbc9309b8b1b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6967</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:43"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6967" id="RHSA-2023:6967" type="rhsa" title="RHSA-2023:6967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33285" id="CVE-2023-33285" type="cve" title="CVE-2023-33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34410" id="CVE-2023-34410" type="cve" title="CVE-2023-34410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37369" id="CVE-2023-37369" type="cve" title="CVE-2023-37369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38197" id="CVE-2023-38197" type="cve" title="CVE-2023-38197"/>
      <reference href="https://bugzilla.redhat.com/2209488" id="2209488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212747" id="2212747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222767" id="2222767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232173" id="2232173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6967.html" id="ALSA-2023:6967" type="self" title="ALSA-2023:6967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="qt5-qtbase-static" version="5.15.3" release="5.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-5.el8.aarch64.rpm</filename>
          <sum type="sha256">489a077b502c5665d7d4958236e07f72039fae83612f791c85d95a5f33750799</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6980</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 14:33:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750)
* QEMU: net: triggerable assertion due to race condition in hot-unplug (CVE-2023-3301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6980" id="RHSA-2023:6980" type="rhsa" title="RHSA-2023:6980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3750" id="CVE-2021-3750" type="cve" title="CVE-2021-3750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3301" id="CVE-2023-3301" type="cve" title="CVE-2023-3301"/>
      <reference href="https://bugzilla.redhat.com/1999073" id="1999073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215784" id="2215784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6980.html" id="ALSA-2023:6980" type="self" title="ALSA-2023:6980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <module name="virt" stream="rhel" version="8060020220510122810" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9faac48b0457b5ffde329591dfb3dcc37e3ca793753db9f27c7ae4c1bf1ac5d9</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7015</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7015" id="RHSA-2023:7015" type="rhsa" title="RHSA-2023:7015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0666" id="CVE-2023-0666" type="cve" title="CVE-2023-0666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2856" id="CVE-2023-2856" type="cve" title="CVE-2023-2856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2858" id="CVE-2023-2858" type="cve" title="CVE-2023-2858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2952" id="CVE-2023-2952" type="cve" title="CVE-2023-2952"/>
      <reference href="https://bugzilla.redhat.com/2210824" id="2210824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210829" id="2210829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210832" id="2210832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211406" id="2211406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7015.html" id="ALSA-2023:7015" type="self" title="ALSA-2023:7015"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="wireshark-devel" version="2.6.2" release="17.el8" epoch="1" arch="aarch64" src="wireshark-2.6.2-17.el8.src.rpm">
          <filename>wireshark-devel-2.6.2-17.el8.aarch64.rpm</filename>
          <sum type="sha256">143d00b01abbba76f186b7d09f01233974b161fd422c9bef514d40d85c248474</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7024</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7024" id="RHSA-2023:7024" type="rhsa" title="RHSA-2023:7024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41105" id="CVE-2023-41105" type="cve" title="CVE-2023-41105"/>
      <reference href="https://bugzilla.redhat.com/2235795" id="2235795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7024.html" id="ALSA-2023:7024" type="self" title="ALSA-2023:7024"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="python3.11-idle" version="3.11.5" release="1.el8_9" epoch="0" arch="aarch64" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-idle-3.11.5-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">64c2fdd6bfc7ae68853768c307ecc98b820ea061a96e001a61d5702c09b9d46f</sum>
        </package>
        <package name="python3.11-debug" version="3.11.5" release="1.el8_9" epoch="0" arch="aarch64" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-debug-3.11.5-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">64cba82130b9491ae8ace565738d7a00e51c0c99f5a05b2927ac5efbb7b4bb74</sum>
        </package>
        <package name="python3.11-test" version="3.11.5" release="1.el8_9" epoch="0" arch="aarch64" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-test-3.11.5-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">87ff37c7368e7b6343b46c8e531e67a843d4d9998429eb625f368b46bf7f8e55</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7034</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 08:38:26"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7034" id="RHSA-2023:7034" type="rhsa" title="RHSA-2023:7034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7034.html" id="ALSA-2023:7034" type="self" title="ALSA-2023:7034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <module name="python39" stream="3.9" version="8060020220421104158" context="b9465af8" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-debug" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="aarch64" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-debug-3.9.18-1.module_el8.9.0+3672+853baa42.aarch64.rpm</filename>
          <sum type="sha256">c7e1fbd8c62304974bbb225d583d5ca4fc4686c10a18976c816868b8a5252cb1</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7038</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak security, bug fix, and enhancement update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.10.8). (BZ#2222103)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7038" id="RHSA-2023:7038" type="rhsa" title="RHSA-2023:7038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101"/>
      <reference href="https://bugzilla.redhat.com/2179219" id="2179219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179220" id="2179220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7038.html" id="ALSA-2023:7038" type="self" title="ALSA-2023:7038"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="flatpak-devel" version="1.10.8" release="1.el8" epoch="0" arch="aarch64" src="flatpak-1.10.8-1.el8.src.rpm">
          <filename>flatpak-devel-1.10.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ef4f163ce8055f500dcaf6cbf80642f850351411468525aef98a2292a6d16019</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7050</id>
    <title>Moderate: python38:3.8 and python38-devel:3.8 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 08:37:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python38:3.8 and python38-devel:3.8 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. 

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7050" id="RHSA-2023:7050" type="rhsa" title="RHSA-2023:7050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7050.html" id="ALSA-2023:7050" type="self" title="ALSA-2023:7050"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <module name="python38" stream="3.8" version="8060020220421093957" context="34b68433" arch="aarch64"/>
        <package name="python38-attrs" version="19.3.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-attrs-19.3.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">09a1d9e4a52965982dfc1fa8ba2beba109e069f6a9f9223d0d37b873326924c4</sum>
        </package>
        <package name="python38-atomicwrites" version="1.3.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-atomicwrites-1.3.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">6fa7f83a90370f540823655ca6cdb8b607b3b9ad24e2e3ad588f8c0e5a1a16c4</sum>
        </package>
        <package name="python38-packaging" version="19.2" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-packaging-19.2-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-packaging-19.2-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">70ba602e2104c884d8da57b6eddb6050293b3718e0bde793fb7435307eaba5fe</sum>
        </package>
        <package name="python38-py" version="1.8.0" release="8.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-py-1.8.0-8.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-py-1.8.0-8.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">9d8d83305122a064931b9f29ad88f4420065574cc5c76c182be95f7985264011</sum>
        </package>
        <package name="python38-wcwidth" version="0.1.7" release="16.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-wcwidth-0.1.7-16.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">acd987c1295ff57494b53c8f0333dcb6393e23302e0bf4943980602d2d632d71</sum>
        </package>
        <package name="python38-pyparsing" version="2.4.5" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pyparsing-2.4.5-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">bde2f98bc679be8f8021723e792d3b80d6e747ef4d13c8df7683e711231b5746</sum>
        </package>
        <package name="python38-pluggy" version="0.13.0" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pluggy-0.13.0-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">c086f05742550f66c5900a95559cff1f359ff15e9d993e2e6b2273d832dc4e53</sum>
        </package>
        <package name="python38-pytest" version="4.6.6" release="3.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-pytest-4.6.6-3.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">e6012b9ccafd25bbaedf217b12e8a334efce23d6d66ed94ee4292ad0e563bf3d</sum>
        </package>
        <package name="python38-more-itertools" version="7.2.0" release="5.module_el8.6.0+2778+cd494b30" epoch="0" arch="noarch" src="python-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.src.rpm">
          <filename>python38-more-itertools-7.2.0-5.module_el8.6.0+2778+cd494b30.noarch.rpm</filename>
          <sum type="sha256">f40c2a878b1c1df38da0c4a0671d1d7ab8a487c6434426e9b63641adad1d5b04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7053</id>
    <title>Moderate: ghostscript security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-22 13:51:21"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security and bug fix update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
* ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)
* ghostscript: Incomplete fix for CVE-2020-16305 (CVE-2023-4042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7053" id="RHSA-2023:7053" type="rhsa" title="RHSA-2023:7053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28879" id="CVE-2023-28879" type="cve" title="CVE-2023-28879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38559" id="CVE-2023-38559" type="cve" title="CVE-2023-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4042" id="CVE-2023-4042" type="cve" title="CVE-2023-4042"/>
      <reference href="https://bugzilla.redhat.com/2184585" id="2184585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224367" id="2224367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228151" id="2228151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7053.html" id="ALSA-2023:7053" type="self" title="ALSA-2023:7053"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="ghostscript-tools-fonts" version="9.27" release="11.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-11.el8.aarch64.rpm</filename>
          <sum type="sha256">88f1db340927a137b888977ac2cfcdd4cbcc675b93cc63eabe980ec9025d1ddc</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="11.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-11.el8.aarch64.rpm</filename>
          <sum type="sha256">94c423b38c6cbedd702f329e41e90a25bc3324386bea1caf3d4bc2aed73de126</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="11.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-tools-printing-9.27-11.el8.aarch64.rpm</filename>
          <sum type="sha256">be082cb6843c5b526f232970e4e8f8111d507c3a94cb2719b5f6520ded60a836</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="11.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>libgs-devel-9.27-11.el8.aarch64.rpm</filename>
          <sum type="sha256">e2d300993fc956d6f3837b74e684afce85c9ff9af3c79db56e9c7c046895d5aa</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="11.el8" epoch="0" arch="noarch" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-doc-9.27-11.el8.noarch.rpm</filename>
          <sum type="sha256">fdc61e8e31a677b70d94c5ca67620c11fc53d1d0d14191361bdc06b0b2e04c3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7057</id>
    <title>Moderate: yajl security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7057" id="RHSA-2023:7057" type="rhsa" title="RHSA-2023:7057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460"/>
      <reference href="https://bugzilla.redhat.com/2221249" id="2221249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7057.html" id="ALSA-2023:7057" type="self" title="ALSA-2023:7057"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="yajl-devel" version="2.1.0" release="12.el8" epoch="0" arch="aarch64" src="yajl-2.1.0-12.el8.src.rpm">
          <filename>yajl-devel-2.1.0-12.el8.aarch64.rpm</filename>
          <sum type="sha256">341cd3d97bea25fc6da4df990f231dd5b55aa93afd17a30c9539969822464d34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7077</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
* kernel: net/sched: multiple vulnerabilities (CVE-2023-3609, CVE-2023-3611, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)
* kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)
* kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975)
* kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594)
* kernel: use after free flaw in l2cap_conn_del (CVE-2022-3640)
* kernel: double free in usb_8dev_start_xmit (CVE-2022-28388)
* kernel: vmwgfx: multiple vulnerabilities (CVE-2022-38457, CVE-2022-40133, CVE-2023-33951, CVE-2023-33952)
* hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)
* kernel: Information leak in l2cap_parse_conf_req (CVE-2022-42895)
* kernel: KVM: multiple vulnerabilities (CVE-2022-45869, CVE-2023-4155, CVE-2023-30456)
* kernel: memory leak in ttusb_dec_exit_dvb (CVE-2022-45887)
* kernel: speculative pointer dereference in do_prlimit (CVE-2023-0458)
* kernel: use-after-free due to race condition in qdisc_graft (CVE-2023-0590)
* kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597)
* kernel: HID: check empty report_list in hid_validate_values (CVE-2023-1073)
* kernel: sctp: fail if no bound addresses can be used for a given scope (CVE-2023-1074)
* kernel: hid: Use After Free in asus_remove (CVE-2023-1079)
* kernel: use-after-free in drivers/media/rc/ene_ir.c (CVE-2023-1118)
* kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206)
* kernel: ovl: fix use after free in struct ovl_aio_req (CVE-2023-1252)
* kernel: denial of service in tipc_conn_close (CVE-2023-1382)
* kernel: Use after free bug in btsdio_remove due to race condition (CVE-2023-1989)
* kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)
* kernel: ext4: use-after-free in ext4_xattr_set_entry (CVE-2023-2513)
* kernel: fbcon: shift-out-of-bounds in fbcon_set_font (CVE-2023-3161)
* kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)
* kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params (CVE-2023-3772)
* kernel: smsusb: use-after-free caused by do_submit_urb (CVE-2023-4132)
* kernel: Race between task migrating pages and another task calling exit_mmap (CVE-2023-4732)
* Kernel: denial of service in atm_tc_enqueue due to type confusion (CVE-2023-23455)
* kernel: mpls: double free on sysctl allocation failure (CVE-2023-26545)
* kernel: Denial of service issue in az6027 driver (CVE-2023-28328)
* kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow (CVE-2023-28772)
* kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible (CVE-2023-31084)
* kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove (CVE-2023-33203)
* kernel: saa7134: race condition leading to use-after-free in saa7134_finidev (CVE-2023-35823)
* kernel: dm1105: race condition leading to use-after-free in dm1105_remove.c (CVE-2023-35824)
* kernel: r592: race condition leading to use-after-free in r592_remove (CVE-2023-35825)
* kernel: net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075)
* kernel: use-after-free bug in remove function xgene_hwmon_remove (CVE-2023-1855)
* kernel: Use after free bug in r592_remove (CVE-2023-3141)
* kernel: gfs2: NULL pointer dereference in gfs2_evict_inode (CVE-2023-3212)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7077" id="RHSA-2023:7077" type="rhsa" title="RHSA-2023:7077"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-43975" id="CVE-2021-43975" type="cve" title="CVE-2021-43975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-28388" id="CVE-2022-28388" type="cve" title="CVE-2022-28388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3594" id="CVE-2022-3594" type="cve" title="CVE-2022-3594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3640" id="CVE-2022-3640" type="cve" title="CVE-2022-3640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38457" id="CVE-2022-38457" type="cve" title="CVE-2022-38457"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40133" id="CVE-2022-40133" type="cve" title="CVE-2022-40133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40982" id="CVE-2022-40982" type="cve" title="CVE-2022-40982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-42895" id="CVE-2022-42895" type="cve" title="CVE-2022-42895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45869" id="CVE-2022-45869" type="cve" title="CVE-2022-45869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45887" id="CVE-2022-45887" type="cve" title="CVE-2022-45887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4744" id="CVE-2022-4744" type="cve" title="CVE-2022-4744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0458" id="CVE-2023-0458" type="cve" title="CVE-2023-0458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0590" id="CVE-2023-0590" type="cve" title="CVE-2023-0590"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0597" id="CVE-2023-0597" type="cve" title="CVE-2023-0597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1073" id="CVE-2023-1073" type="cve" title="CVE-2023-1073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1074" id="CVE-2023-1074" type="cve" title="CVE-2023-1074"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1075" id="CVE-2023-1075" type="cve" title="CVE-2023-1075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1079" id="CVE-2023-1079" type="cve" title="CVE-2023-1079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1118" id="CVE-2023-1118" type="cve" title="CVE-2023-1118"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1206" id="CVE-2023-1206" type="cve" title="CVE-2023-1206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1252" id="CVE-2023-1252" type="cve" title="CVE-2023-1252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1382" id="CVE-2023-1382" type="cve" title="CVE-2023-1382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1855" id="CVE-2023-1855" type="cve" title="CVE-2023-1855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1989" id="CVE-2023-1989" type="cve" title="CVE-2023-1989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1998" id="CVE-2023-1998" type="cve" title="CVE-2023-1998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23455" id="CVE-2023-23455" type="cve" title="CVE-2023-23455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2513" id="CVE-2023-2513" type="cve" title="CVE-2023-2513"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-26545" id="CVE-2023-26545" type="cve" title="CVE-2023-26545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28328" id="CVE-2023-28328" type="cve" title="CVE-2023-28328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28772" id="CVE-2023-28772" type="cve" title="CVE-2023-28772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-30456" id="CVE-2023-30456" type="cve" title="CVE-2023-30456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31084" id="CVE-2023-31084" type="cve" title="CVE-2023-31084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3141" id="CVE-2023-3141" type="cve" title="CVE-2023-3141"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31436" id="CVE-2023-31436" type="cve" title="CVE-2023-31436"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3161" id="CVE-2023-3161" type="cve" title="CVE-2023-3161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3212" id="CVE-2023-3212" type="cve" title="CVE-2023-3212"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3268" id="CVE-2023-3268" type="cve" title="CVE-2023-3268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33203" id="CVE-2023-33203" type="cve" title="CVE-2023-33203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33951" id="CVE-2023-33951" type="cve" title="CVE-2023-33951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33952" id="CVE-2023-33952" type="cve" title="CVE-2023-33952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35823" id="CVE-2023-35823" type="cve" title="CVE-2023-35823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35824" id="CVE-2023-35824" type="cve" title="CVE-2023-35824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35825" id="CVE-2023-35825" type="cve" title="CVE-2023-35825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3609" id="CVE-2023-3609" type="cve" title="CVE-2023-3609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3611" id="CVE-2023-3611" type="cve" title="CVE-2023-3611"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3772" id="CVE-2023-3772" type="cve" title="CVE-2023-3772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4128" id="CVE-2023-4128" type="cve" title="CVE-2023-4128"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4132" id="CVE-2023-4132" type="cve" title="CVE-2023-4132"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4155" id="CVE-2023-4155" type="cve" title="CVE-2023-4155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4206" id="CVE-2023-4206" type="cve" title="CVE-2023-4206"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4207" id="CVE-2023-4207" type="cve" title="CVE-2023-4207"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4208" id="CVE-2023-4208" type="cve" title="CVE-2023-4208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4732" id="CVE-2023-4732" type="cve" title="CVE-2023-4732"/>
      <reference href="https://bugzilla.redhat.com/2024989" id="2024989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2073091" id="2073091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133453" id="2133453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133455" id="2133455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2139610" id="2139610" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2147356" id="2147356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148520" id="2148520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149024" id="2149024" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151317" id="2151317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2156322" id="2156322" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165741" id="2165741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165926" id="2165926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2168332" id="2168332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2173403" id="2173403" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2173430" id="2173430" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2173434" id="2173434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2173444" id="2173444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2174400" id="2174400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2175903" id="2175903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2176140" id="2176140" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177371" id="2177371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177389" id="2177389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2181330" id="2181330" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2182443" id="2182443" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2184578" id="2184578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2185945" id="2185945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187257" id="2187257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2188468" id="2188468" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192667" id="2192667" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2192671" id="2192671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193097" id="2193097" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2193219" id="2193219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213139" id="2213139" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213199" id="2213199" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213485" id="2213485" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213802" id="2213802" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2214348" id="2214348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215502" id="2215502" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215835" id="2215835" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215836" id="2215836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215837" id="2215837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218195" id="2218195" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218212" id="2218212" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218943" id="2218943" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221707" id="2221707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223949" id="2223949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225191" id="2225191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225201" id="2225201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2225511" id="2225511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236982" id="2236982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7077.html" id="ALSA-2023:7077" type="self" title="ALSA-2023:7077"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="513.5.1.el8_9" epoch="0" arch="aarch64" src="kernel-4.18.0-513.5.1.el8_9.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-513.5.1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">ae9340c04a962faa3381c199ce8902b0557c0e0fc8d24a422d0552d6807f9e68</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7090</id>
    <title>Moderate: libmicrohttpd security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libmicrohttpd security update</summary>
    <description>GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.

Security Fix(es):

* libmicrohttpd: remote DoS (CVE-2023-27371)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7090" id="RHSA-2023:7090" type="rhsa" title="RHSA-2023:7090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27371" id="CVE-2023-27371" type="cve" title="CVE-2023-27371"/>
      <reference href="https://bugzilla.redhat.com/2174313" id="2174313" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7090.html" id="ALSA-2023:7090" type="self" title="ALSA-2023:7090"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="libmicrohttpd-doc" version="0.9.59" release="3.el8" epoch="1" arch="noarch" src="libmicrohttpd-0.9.59-3.el8.src.rpm">
          <filename>libmicrohttpd-doc-0.9.59-3.el8.noarch.rpm</filename>
          <sum type="sha256">33a49b2fe35591ea8d5cfec95e00b4fdfc48122102bf7f4094151c694fc3e613</sum>
        </package>
        <package name="libmicrohttpd-devel" version="0.9.59" release="3.el8" epoch="1" arch="aarch64" src="libmicrohttpd-0.9.59-3.el8.src.rpm">
          <filename>libmicrohttpd-devel-0.9.59-3.el8.aarch64.rpm</filename>
          <sum type="sha256">adfe983ddae08b588dc7663cf4b934dac02d1d2ad3197b41fb7abdd8047a471c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7112</id>
    <title>Low: shadow-utils security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security and bug fix update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. 

Security Fix(es):

* shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7112" id="RHSA-2023:7112" type="rhsa" title="RHSA-2023:7112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4641" id="CVE-2023-4641" type="cve" title="CVE-2023-4641"/>
      <reference href="https://bugzilla.redhat.com/2215945" id="2215945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7112.html" id="ALSA-2023:7112" type="self" title="ALSA-2023:7112"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="shadow-utils-subid-devel" version="4.6" release="19.el8" epoch="2" arch="aarch64" src="shadow-utils-4.6-19.el8.src.rpm">
          <filename>shadow-utils-subid-devel-4.6-19.el8.aarch64.rpm</filename>
          <sum type="sha256">4b46173c35e0ec5aeb0d3b8157376f3d72cd123bc0c6cd9245b95a67e9913cc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7139</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:20:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190417)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7139" id="RHSA-2023:7139" type="rhsa" title="RHSA-2023:7139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7139.html" id="ALSA-2023:7139" type="self" title="ALSA-2023:7139"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="python3-samba-devel" version="4.18.6" release="1.el8" epoch="0" arch="aarch64" src="samba-4.18.6-1.el8.src.rpm">
          <filename>python3-samba-devel-4.18.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">08f9190dd5c864fe3c5b2db2de89cad49be9807e55f231d398bbf5c57dab6037</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="1.el8" epoch="0" arch="aarch64" src="samba-4.18.6-1.el8.src.rpm">
          <filename>libwbclient-devel-4.18.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6313c29d22047807b8de8e1fa7e4ef15a3606273cc9b757d47e1bb1f4c2f5735</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="1.el8" epoch="0" arch="aarch64" src="samba-4.18.6-1.el8.src.rpm">
          <filename>libsmbclient-devel-4.18.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">96a8f7aa51173536cac3e929eb3bdce7e06c92485a0998e366adfe537132cb27</sum>
        </package>
        <package name="libnetapi-devel" version="4.18.6" release="1.el8" epoch="0" arch="aarch64" src="samba-4.18.6-1.el8.src.rpm">
          <filename>libnetapi-devel-4.18.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">aa8775c634707839d54c9cc21d7addfd9870506104ffb906247a6a1fff05b4c5</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="1.el8" epoch="0" arch="aarch64" src="samba-4.18.6-1.el8.src.rpm">
          <filename>samba-devel-4.18.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">cdd68a54db4115cfc75112be857ce36cc98035f6fe6a73b7e39e3e7af222d909</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7150</id>
    <title>Moderate: librabbitmq security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:50"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>librabbitmq security update</summary>
    <description>The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

* rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7150" id="RHSA-2023:7150" type="rhsa" title="RHSA-2023:7150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35789" id="CVE-2023-35789" type="cve" title="CVE-2023-35789"/>
      <reference href="https://bugzilla.redhat.com/2215762" id="2215762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7150.html" id="ALSA-2023:7150" type="self" title="ALSA-2023:7150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="librabbitmq-devel" version="0.9.0" release="4.el8" epoch="0" arch="aarch64" src="librabbitmq-0.9.0-4.el8.src.rpm">
          <filename>librabbitmq-devel-0.9.0-4.el8.aarch64.rpm</filename>
          <sum type="sha256">6b4024dbef05c0029f0fd65990f733c9c8a5ccb83503c52f51179f4466b5351c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7187</id>
    <title>Low: procps-ng security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>procps-ng security update</summary>
    <description>The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

* procps: ps buffer overflow (CVE-2023-4016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7187" id="RHSA-2023:7187" type="rhsa" title="RHSA-2023:7187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4016" id="CVE-2023-4016" type="cve" title="CVE-2023-4016"/>
      <reference href="https://bugzilla.redhat.com/2228494" id="2228494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7187.html" id="ALSA-2023:7187" type="self" title="ALSA-2023:7187"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="procps-ng-devel" version="3.3.15" release="14.el8" epoch="0" arch="aarch64" src="procps-ng-3.3.15-14.el8.src.rpm">
          <filename>procps-ng-devel-3.3.15-14.el8.aarch64.rpm</filename>
          <sum type="sha256">12dd320236733330314087d4ef66007e6aa756a319096b8dfb7d386c026b4c2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7189</id>
    <title>Moderate: fwupd security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fwupd security update</summary>
    <description>The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7189" id="RHSA-2023:7189" type="rhsa" title="RHSA-2023:7189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3287" id="CVE-2022-3287" type="cve" title="CVE-2022-3287"/>
      <reference href="https://bugzilla.redhat.com/2129904" id="2129904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7189.html" id="ALSA-2023:7189" type="self" title="ALSA-2023:7189"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="fwupd-devel" version="1.7.8" release="2.el8" epoch="0" arch="aarch64" src="fwupd-1.7.8-2.el8.src.rpm">
          <filename>fwupd-devel-1.7.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b447532b98db2f80655884af695fa5d64525dba0391840279e1113dd4366c3e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7190</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:21:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7190" id="RHSA-2023:7190" type="rhsa" title="RHSA-2023:7190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7190.html" id="ALSA-2023:7190" type="self" title="ALSA-2023:7190"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="avahi-ui" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-ui-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">1a36e381e0c98c903686ea13d8328b79862f3cecfa044a4d92ca3b872c41cea5</sum>
        </package>
        <package name="avahi-ui-devel" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-ui-devel-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">2708524d06dc834d9eda57a4937a9a59a19384b4ced150d0c72d61b85a690b39</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">2d69aad7d524711599593242357a997ba6ab07beb8ac930d57a7ceed36040b91</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-howl-devel-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">40844ed4c707a6f7dac22bd9bb75d7e2d59770e9d1a95621f6d39545ba924609</sum>
        </package>
        <package name="avahi-glib-devel" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-glib-devel-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">45e54619395bdbe7ee1751d971a20669fcb0639e31e868f3d97c1d7aab110ef2</sum>
        </package>
        <package name="avahi-compat-howl" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-howl-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">4ee615e7b0190b5a9fde5f02769b341e1b69b104be9bdefeb9af0df6c621e53b</sum>
        </package>
        <package name="avahi-gobject-devel" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-gobject-devel-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">b078525a92f012c120cb2da800fd955f94b0f6ace4b05d460e6deaaf04c6eb80</sum>
        </package>
        <package name="avahi-devel" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-devel-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">b3c38b51c725fd680a76684792dab8e7c49db194bdef777d324ccd8b11802f60</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.7" release="21.el8" epoch="0" arch="aarch64" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-libdns_sd-0.7-21.el8.aarch64.rpm</filename>
          <sum type="sha256">f78b1b0b8d7f9b38c7b6a9f9da0b68ede7dcd9696ff0cd9622ef690f53da49b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7254</id>
    <title>Moderate: dotnet8.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:18:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7254" id="RHSA-2023:7254" type="rhsa" title="RHSA-2023:7254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7254.html" id="ALSA-2023:7254" type="self" title="ALSA-2023:7254"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.100" release="2.el8_9" epoch="0" arch="aarch64" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.100-2.el8_9.aarch64.rpm</filename>
          <sum type="sha256">f3e5a957ae9f134319fb9495a48d8edb733e6a05ccfdfde3640a145a4791d236</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7256</id>
    <title>Moderate: dotnet7.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:18:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7256" id="RHSA-2023:7256" type="rhsa" title="RHSA-2023:7256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7256.html" id="ALSA-2023:7256" type="self" title="ALSA-2023:7256"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.114" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.114-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">662aed333ddb95c4dd2ce9a3424a46ed39cf8a8cfad0f6ea8a785c5986bc4c15</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7258</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:18:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7258" id="RHSA-2023:7258" type="rhsa" title="RHSA-2023:7258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7258.html" id="ALSA-2023:7258" type="self" title="ALSA-2023:7258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.125" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.125-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">ea5683420c3fcd15279711a6aa3c86ea9c8dfd28d57109d041498d6fc51b3f23</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7467</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-22 00:00:00"/>
    <updated date="2023-11-24 10:04:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7467" id="RHSA-2023:7467" type="rhsa" title="RHSA-2023:7467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7467.html" id="ALSA-2023:7467" type="self" title="ALSA-2023:7467"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="libnetapi-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>libnetapi-devel-4.18.6-2.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">024e8dbb7affcb7a77dd2becb7044114d093727983a37887a358d8882ac7e026</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>libsmbclient-devel-4.18.6-2.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">05f0ecb81a5603c38e461e778fa0e49b9ade5805bf62c99c01df006b2b84a748</sum>
        </package>
        <package name="python3-samba-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>python3-samba-devel-4.18.6-2.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">5472cc2dd4dac7793b5dee4741909412e965ce801de970b03a507bdc6f7fea4d</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>libwbclient-devel-4.18.6-2.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b0691bbc7e53a5e1fc9892b00f36ca6b0cf79a4d8af21b44f323b2be08bb2cfb</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="aarch64" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>samba-devel-4.18.6-2.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ba64617e49a4a2fc89d4b7a0958a1153ce2f30aa5a51da2ca5f6c359183df1fd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7549</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2023-11-28 00:00:00"/>
    <updated date="2023-12-04 01:02:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe (CVE-2023-2163)
* kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)
* kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)
* kernel: use-after-free due to race condition occurring in dvb_register_device() (CVE-2022-45884)
* kernel: use-after-free due to race condition occurring in dvb_net.c (CVE-2022-45886)
* kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c (CVE-2022-45919)
* kernel: use-after-free in smb2_is_status_io_timeout() (CVE-2023-1192)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):
* Fix max integer mmu_invalidate_seq hanging vCPU (ALBZ#445)
* Random delay receiving packets after bringing up VLAN on top of VF with vf-vlan-pruning enabled (BZ#2240750)
* bpf_jit_limit hit again (BZ#2243011)
* HPE Edgeline 920t resets during kdump context when ice driver is loaded and when system is booted with intel_iommu=on iommu=pt (BZ#2244625)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7549" id="RHSA-2023:7549" type="rhsa" title="RHSA-2023:7549"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45884" id="CVE-2022-45884" type="cve" title="CVE-2022-45884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45886" id="CVE-2022-45886" type="cve" title="CVE-2022-45886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45919" id="CVE-2022-45919" type="cve" title="CVE-2022-45919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1192" id="CVE-2023-1192" type="cve" title="CVE-2023-1192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2163" id="CVE-2023-2163" type="cve" title="CVE-2023-2163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3812" id="CVE-2023-3812" type="cve" title="CVE-2023-3812"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5178" id="CVE-2023-5178" type="cve" title="CVE-2023-5178"/>
      <reference href="https://bugzilla.redhat.com/2148510" id="2148510" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148517" id="2148517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151956" id="2151956" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2154178" id="2154178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224048" id="2224048" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240249" id="2240249" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241924" id="2241924" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7549.html" id="ALSA-2023:7549" type="self" title="ALSA-2023:7549"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="513.9.1.el8_9" epoch="0" arch="aarch64" src="kernel-4.18.0-513.9.1.el8_9.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-513.9.1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">1e7fdd6718effe7d12d3121ee65eeb940ec5dd817d820d94a31879266fb58045</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7836</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-15 09:22:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7836" id="RHSA-2023:7836" type="rhsa" title="RHSA-2023:7836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7836.html" id="ALSA-2023:7836" type="self" title="ALSA-2023:7836"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="avahi-compat-libdns_sd-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">028a9dd6c70eb5a7cc416d56ac1bb505e87d112895fb43af4556ec3a1b290bdf</sum>
        </package>
        <package name="avahi-ui" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-ui-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">0f866a482bfc67c11d25ea01b69dd47babcaa6cfdbd62b4d3c8db3e4b7eeb80a</sum>
        </package>
        <package name="avahi-compat-howl" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-howl-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">41c08200c194ad210d300e353721c2c380eaf098b810241c5b0148bf05dbb0f7</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-libdns_sd-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">6072c68c6fae9f3b98b98f4d2a28cc1ed583630e9ee2a4208fc225f0cf40525c</sum>
        </package>
        <package name="avahi-gobject-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-gobject-devel-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">64679b2a306172ffc86a38f87f946eacc2ad1c62b5819663ef7041100d0bc91c</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-howl-devel-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">811262b91679fea4e1faf0447f0785691d4df7a7b41d346a353a98e1d774845d</sum>
        </package>
        <package name="avahi-glib-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-glib-devel-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">836d058be454580508d5da2a75f9b48d3ae4463039bde4762a0fe492346ece82</sum>
        </package>
        <package name="avahi-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-devel-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">86e02f9ef7ff77876a6b09aea290ba59544fda6d631853737d29d84888a67b5e</sum>
        </package>
        <package name="avahi-ui-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="aarch64" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-ui-devel-0.7-21.el8_9.1.aarch64.rpm</filename>
          <sum type="sha256">88e82123d4806e5999d39eb19728266e1ade04a18afcb394f4f0e733049cddbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7841</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-15 09:13:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7841" id="RHSA-2023:7841" type="rhsa" title="RHSA-2023:7841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44446" id="CVE-2023-44446" type="cve" title="CVE-2023-44446"/>
      <reference href="https://bugzilla.redhat.com/2250249" id="2250249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7841.html" id="ALSA-2023:7841" type="self" title="ALSA-2023:7841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="2.el8_9.alma.1" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.16.1-2.el8_9.alma.1.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-2.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">4fff8b7c1b023eb7fc368939826b93b6d67c3c1d79c4d65c684cf3a55d2c45ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0113</id>
    <title>Important: kernel security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-17 10:35:14"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: use after free in unix_stream_sendpage (CVE-2023-4622)
* kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633)
* kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)
* Kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162)
* hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Backport OVS l4 Symmetric Hashing to almalinux-8 (JIRA:AlmaLinux-12746)
* Unbounded memory usage by TCP for receive buffers (JIRA:AlmaLinux-15096)
* various kind of guests freeze on rhel 8.8 (JIRA:AlmaLinux-15121)
* AlmaLinux 8: netfilter: conntrack: Fix gre tunneling over ipv6  (JIRA:AlmaLinux-15259)
* NFSv4.1 needs to handle ENOENT error from GETDEVICEINFO (JIRA:AlmaLinux-16407)
* DM multipath showing failed path for an nvme-o-FC LUN when performing I/O operations (JIRA:AlmaLinux-14718)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0113" id="RHSA-2024:0113" type="rhsa" title="RHSA-2024:0113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-20569" id="CVE-2023-20569" type="cve" title="CVE-2023-20569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2162" id="CVE-2023-2162" type="cve" title="CVE-2023-2162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42753" id="CVE-2023-42753" type="cve" title="CVE-2023-42753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4622" id="CVE-2023-4622" type="cve" title="CVE-2023-4622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5633" id="CVE-2023-5633" type="cve" title="CVE-2023-5633"/>
      <reference href="https://bugzilla.redhat.com/2187773" id="2187773" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2207625" id="2207625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237760" id="2237760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239843" id="2239843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245663" id="2245663" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0113.html" id="ALSA-2024:0113" type="self" title="ALSA-2024:0113"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="513.11.1.el8_9" epoch="0" arch="aarch64" src="kernel-4.18.0-513.11.1.el8_9.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-513.11.1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">91e6903e8504ac713422d9f49ef92b8cfc3bce0e0b28d177669413052e2c3e04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0150</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 20:16:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0150" id="RHSA-2024:0150" type="rhsa" title="RHSA-2024:0150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0150.html" id="ALSA-2024:0150" type="self" title="ALSA-2024:0150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.101" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.101-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">f09bb322b543aaa8b294ecc2982ec0db9bb129a4d936d2fbd2820a82808fb63a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0157</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 19:01:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0157" id="RHSA-2024:0157" type="rhsa" title="RHSA-2024:0157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0157.html" id="ALSA-2024:0157" type="self" title="ALSA-2024:0157"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.115" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">82a8298e56251ded68c8a498fad2319b55369dab0f1de4eaca75c546d8c06375</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0158</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 18:37:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0158" id="RHSA-2024:0158" type="rhsa" title="RHSA-2024:0158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0158.html" id="ALSA-2024:0158" type="self" title="ALSA-2024:0158"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.126" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">adfe166e5bf71ff2648c8a4102a6c55e33dee7be741025a7ad1cb779978ff309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0248</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 11:28:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0248" id="RHSA-2024:0248" type="rhsa" title="RHSA-2024:0248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0248.html" id="ALSA-2024:0248" type="self" title="ALSA-2024:0248"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">0ac34ac2e52afb8aab889ca1c55485e1464bcc019a30d1898c674bd0b864d677</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">311c6088d7428db513878a76311fbe855eb3269ae5fd9d2540b87e2a47c4cf2c</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3151d44bfd4952cc8e96cbff44abdf84b22b9c20ada4a5deb74b8095f5b9b1d1</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">490adeb43bff5ea9e615e3a56fdf6eb83652f2e29b7be89744a72ec3860f396c</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">59531576f32f56117a5a649a09d04c7a32a15bb425a7aef82c9258112c70b8d8</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">5fb3547b76e78480fbc0767aada284f4ace4429bbcc139ed8b1dab0df836b15e</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6194211d2a57a59690b04da36bd10955351ea415830ac5d29acb01065494bb2b</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6b1fff0bea96f2e26e0fe77df5f1738e633e27024da6ed0e042b66c0a3d911d1</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">880442e74e53cc9163fdf599ebfe2285ff026ee5bc32d3a50782bb6ff4c34805</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b4b4b7138b35b762482520bb790913b468a6ea05d05237f843921514ce6a0ab5</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">baad7fe2eccb8ab034b8e52a67f08bafc4a6418b77251f46b816e438525f3784</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">c26a12f5cbcb83e805fd1e114a632ee3caab10c78133fd9ea88a4fce4bb7ebbb</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">d5a868ff7a88bb82cfcdee12770951351ef0a8ba321480aa01c59d82aa7a5048</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.2.0.13-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e80e14a5107602cbcc0b11cf901a1d80f4aa183697fad2aa6a76f0b38be53f8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0265</id>
    <title>Important: java-1.8.0-openjdk security and bug fix update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-03-05 10:02:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security and bug fix update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0265" id="RHSA-2024:0265" type="rhsa" title="RHSA-2024:0265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20926" id="CVE-2024-20926" type="cve" title="CVE-2024-20926"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257850" id="2257850" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0265.html" id="ALSA-2024:0265" type="self" title="ALSA-2024:0265"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">05dbae26be379bfcaeab1ef7e5b1c2f7e649bb6d7f23b022a0053933e452ec1c</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2b30a375473a491ce10941ede82cec983a986dcded207c039f85fabba6ca7e26</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3cbb6969787afea2600f9547899953d2a3c60794fbd37358ab0a0bd981c3f411</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6f65240702bb283156444fe8997ecd139af2c44c1dcdcf4f08f1b2d1ec44fa33</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">80b24e211caf0323a3b26a6e0ea75be11e9040f18bfa06b611c5324fa34f02b9</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8707222fb814bb403c616ff55e47796932383112572f63da75fbd1d74a93d570</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8e9e1608c8b4b2051a04b073a122d2ecb37074ded4b1f1280d4e88b1b6ecefb8</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9a9209701729f320418dd596a84f6c298e6511a0b3e09d6a3a54ed08d56f05f7</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b378af1ea6add562fe0ef608dd4930937d66a9814198ca6bfc6ea4696c7dacbe</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d6b5d45ff8ab562b7838ab4e77c1f0841c7d3429fc37bd9cd8241087809375fb</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">dff4ad0e5ee3861efbe32d50ff51e68dcfd57fc00ff05436c4a267f49e0e426b</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.402.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.402.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.402.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e09621ba5f40da7d9d3d996f3427c180c2c1456e70b7f129cfc46c5afbd558dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0806</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 10:05:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0806" id="RHSA-2024:0806" type="rhsa" title="RHSA-2024:0806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0806.html" id="ALSA-2024:0806" type="self" title="ALSA-2024:0806"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.116" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.116-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">bbab5f7920632ed028d95cdc75abd491a0ddb00f8e82f2dfc48f29eecb582b5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0808</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:08:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0808" id="RHSA-2024:0808" type="rhsa" title="RHSA-2024:0808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0808.html" id="ALSA-2024:0808" type="self" title="ALSA-2024:0808"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.127" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.127-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">c21f29da3bb6f7bc357272d70365b9e34bc76fd1bc2e4b1df9a4891acba9cdc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0827</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 10:14:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0827" id="RHSA-2024:0827" type="rhsa" title="RHSA-2024:0827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0827.html" id="ALSA-2024:0827" type="self" title="ALSA-2024:0827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.102" release="2.el8_9" epoch="0" arch="aarch64" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.102-2.el8_9.aarch64.rpm</filename>
          <sum type="sha256">af30e036ea326c48c2381bd4a46d7a3e57ec89634762af53e03cb89914171020</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0889</id>
    <title>Moderate: oniguruma security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:31:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>oniguruma security update</summary>
    <description>Oniguruma is a regular expressions library that supports a variety of character encodings. 

Security Fix(es):

* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)
* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)
* oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read (CVE-2019-19012)
* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)
* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0889" id="RHSA-2024:0889" type="rhsa" title="RHSA-2024:0889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-13224" id="CVE-2019-13224" type="cve" title="CVE-2019-13224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-16163" id="CVE-2019-16163" type="cve" title="CVE-2019-16163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19012" id="CVE-2019-19012" type="cve" title="CVE-2019-19012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19203" id="CVE-2019-19203" type="cve" title="CVE-2019-19203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19204" id="CVE-2019-19204" type="cve" title="CVE-2019-19204"/>
      <reference href="https://bugzilla.redhat.com/1728970" id="1728970" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1768997" id="1768997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802051" id="1802051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802061" id="1802061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802068" id="1802068" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0889.html" id="ALSA-2024:0889" type="self" title="ALSA-2024:0889"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="oniguruma-devel" version="6.8.2" release="2.1.el8_9" epoch="0" arch="aarch64" src="oniguruma-6.8.2-2.1.el8_9.src.rpm">
          <filename>oniguruma-devel-6.8.2-2.1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">c40f03ec7113611ad9919034c5fdfb4eeebb1a60def800a7206f9c5b2e5ead1d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0893</id>
    <title>Important: python-pillow security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:24:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* pillow: Arbitrary Code Execution via the environment parameter (CVE-2023-50447)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0893" id="RHSA-2024:0893" type="rhsa" title="RHSA-2024:0893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50447" id="CVE-2023-50447" type="cve" title="CVE-2023-50447"/>
      <reference href="https://bugzilla.redhat.com/2259479" id="2259479" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0893.html" id="ALSA-2024:0893" type="self" title="ALSA-2024:0893"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="python3-pillow-doc" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="noarch" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-doc-5.1.1-18.el8_9.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">7905756e31e07345223207d9bc7cedca64e16151b80b7e0a33957feb18f2eee1</sum>
        </package>
        <package name="python3-pillow-tk" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-tk-5.1.1-18.el8_9.1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ac06dbc64d19a02e1e46560837bd24b28b804a84773af38f148a1496bb9d473f</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="aarch64" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-devel-5.1.1-18.el8_9.1.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e4492f6d02a6f9bc2fffc21a0c8f73f96754e991d4391c7d9071a23bfade3e4d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0897</id>
    <title>Important: kernel security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:10:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: net/sched: sch_hfsc UAF (CVE-2023-4623)
* kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921)
* kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)
* kernel: IGB driver inadequate buffer size for frames larger than MTU (CVE-2023-45871)
* kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination (CVE-2024-0646)
* kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)
* kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)
* kernel: HID: check empty report_list in hid_validate_values() (CVE-2023-1073)
* kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend() (CVE-2023-1838)
* kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)
* kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)
* kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list (CVE-2023-5717)
* kernel: NULL pointer dereference in nvmet_tcp_build_iovec (CVE-2023-6356)
* kernel: NULL pointer dereference in nvmet_tcp_execute_request (CVE-2023-6535)
* kernel: NULL pointer dereference in __nvmet_req_complete (CVE-2023-6536)
* kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (CVE-2023-6606)
* kernel: OOB Access in smb2_dump_detail (CVE-2023-6610)
* kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)
* kernel: SEV-ES local priv escalation (CVE-2023-46813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0897" id="RHSA-2024:0897" type="rhsa" title="RHSA-2024:0897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3545" id="CVE-2022-3545" type="cve" title="CVE-2022-3545"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41858" id="CVE-2022-41858" type="cve" title="CVE-2022-41858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1073" id="CVE-2023-1073" type="cve" title="CVE-2023-1073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1838" id="CVE-2023-1838" type="cve" title="CVE-2023-1838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2166" id="CVE-2023-2166" type="cve" title="CVE-2023-2166"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2176" id="CVE-2023-2176" type="cve" title="CVE-2023-2176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40283" id="CVE-2023-40283" type="cve" title="CVE-2023-40283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45871" id="CVE-2023-45871" type="cve" title="CVE-2023-45871"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4623" id="CVE-2023-4623" type="cve" title="CVE-2023-4623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46813" id="CVE-2023-46813" type="cve" title="CVE-2023-46813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4921" id="CVE-2023-4921" type="cve" title="CVE-2023-4921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5717" id="CVE-2023-5717" type="cve" title="CVE-2023-5717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6356" id="CVE-2023-6356" type="cve" title="CVE-2023-6356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6535" id="CVE-2023-6535" type="cve" title="CVE-2023-6535"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6536" id="CVE-2023-6536" type="cve" title="CVE-2023-6536"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6606" id="CVE-2023-6606" type="cve" title="CVE-2023-6606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6610" id="CVE-2023-6610" type="cve" title="CVE-2023-6610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6817" id="CVE-2023-6817" type="cve" title="CVE-2023-6817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0646" id="CVE-2024-0646" type="cve" title="CVE-2024-0646"/>
      <reference href="https://bugzilla.redhat.com/2087568" id="2087568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144379" id="2144379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2161310" id="2161310" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2173403" id="2173403" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187813" id="2187813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187931" id="2187931" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231800" id="2231800" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237757" id="2237757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244723" id="2244723" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2245514" id="2245514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246944" id="2246944" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2246945" id="2246945" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253611" id="2253611" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253614" id="2253614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253908" id="2253908" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254052" id="2254052" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254053" id="2254053" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254054" id="2254054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255139" id="2255139" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0897.html" id="ALSA-2024:0897" type="self" title="ALSA-2024:0897"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="513.18.1.el8_9" epoch="0" arch="aarch64" src="kernel-4.18.0-513.18.1.el8_9.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-513.18.1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">be9559ec102e031ae9903759d81672bf812a3176a3c650b41d61bbfbd7fed013</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10281</id>
    <title>Moderate: kernel:4.18.0 security update</title>
    <issued date="2024-11-26 00:00:00"/>
    <updated date="2024-12-02 10:44:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel:4.18.0 security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: edia: dvbdev: fix a use-after-free (CVE-2024-27043)
  * kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399)
  * kernel: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CVE-2024-38564)
  * kernel: mptcp: pm: Fix uaf in __timer_delete_sync (CVE-2024-46858)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10281" id="RHSA-2024:10281" type="rhsa" title="RHSA-2024:10281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27043" id="CVE-2024-27043" type="cve" title="CVE-2024-27043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27399" id="CVE-2024-27399" type="cve" title="CVE-2024-27399"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38564" id="CVE-2024-38564" type="cve" title="CVE-2024-38564"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46858" id="CVE-2024-46858" type="cve" title="CVE-2024-46858"/>
      <reference href="https://bugzilla.redhat.com/2278445" id="2278445" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280462" id="2280462" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293429" id="2293429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315210" id="2315210" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10281.html" id="ALSA-2024:10281" type="self" title="ALSA-2024:10281"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.30.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.30.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.30.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5aec23c67559ad5a0dd0b61e964f82dcd859b6dcfffcaad84e9f5e42948a9050</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10943</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-12-11 00:00:00"/>
    <updated date="2024-12-16 15:02:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook (CVE-2024-46695)
  * kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CVE-2024-49949)
  * kernel: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (CVE-2024-50082)
  * kernel: arm64: probes: Remove broken LDR (literal) uprobe support (CVE-2024-50099)
  * kernel: xfrm: fix one more kernel-infoleak in algo dumping (CVE-2024-50110)
  * kernel: xfrm: validate new SA&amp;#39;s prefixlen using SA family when sel.family is unset (CVE-2024-50142)
  * kernel: irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (CVE-2024-50192)
  * kernel: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (CVE-2024-50256)
  * kernel: vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (CVE-2024-50264)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10943" id="RHSA-2024:10943" type="rhsa" title="RHSA-2024:10943"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46695" id="CVE-2024-46695" type="cve" title="CVE-2024-46695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-49949" id="CVE-2024-49949" type="cve" title="CVE-2024-49949"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50082" id="CVE-2024-50082" type="cve" title="CVE-2024-50082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50099" id="CVE-2024-50099" type="cve" title="CVE-2024-50099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50110" id="CVE-2024-50110" type="cve" title="CVE-2024-50110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50142" id="CVE-2024-50142" type="cve" title="CVE-2024-50142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50192" id="CVE-2024-50192" type="cve" title="CVE-2024-50192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50256" id="CVE-2024-50256" type="cve" title="CVE-2024-50256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50264" id="CVE-2024-50264" type="cve" title="CVE-2024-50264"/>
      <reference href="https://bugzilla.redhat.com/2312083" id="2312083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2320505" id="2320505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2322308" id="2322308" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323904" id="2323904" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2323930" id="2323930" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324315" id="2324315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324612" id="2324612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2324889" id="2324889" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327168" id="2327168" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10943.html" id="ALSA-2024:10943" type="self" title="ALSA-2024:10943"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.32.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.32.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.32.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">688ae7ce36b2857d95c9c1dc9dce7c3ee68e434be1074976da0c474e8036ccf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10979</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:43:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10979" id="RHSA-2024:10979" type="rhsa" title="RHSA-2024:10979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10979.html" id="ALSA-2024:10979" type="self" title="ALSA-2024:10979"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-idle" version="3.11.11" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.11-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">774bc682a1ae915dfbbde8dd567cc53358a49e5599f1506154694a013184e248</sum>
        </package>
        <package name="python3.11-debug" version="3.11.11" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.11-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d6a9949983924e942d182476ffed820e57c844702cc4c186e00dfe7d2b478882</sum>
        </package>
        <package name="python3.11-test" version="3.11.11" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.11-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">fc034a3c6d1f879a4ddebf088d9eebf34e412009d8525bf3a1ab2bc2d4624df5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10980</id>
    <title>Important: python3.12 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:40:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10980" id="RHSA-2024:10980" type="rhsa" title="RHSA-2024:10980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12254" id="CVE-2024-12254" type="cve" title="CVE-2024-12254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330804" id="2330804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10980.html" id="ALSA-2024:10980" type="self" title="ALSA-2024:10980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.8" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.8-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">01cd97cc2308df04b3697ee28dedc53f697ed19c0d001dd64fa956ae5364b18d</sum>
        </package>
        <package name="python3.12-idle" version="3.12.8" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.8-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">486c4ec24e9538b11d00e260e0f95556806f5c3548065d43b6ee07f8f5a08379</sum>
        </package>
        <package name="python3.12-debug" version="3.12.8" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.8-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5f65f720bef68686c54ecf0330c63c55fb9f0993905daae0a39caf8ca104448b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11154</id>
    <title>Moderate: bluez security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:53:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11154" id="RHSA-2024:11154" type="rhsa" title="RHSA-2024:11154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866"/>
      <reference href="https://bugzilla.redhat.com/2253391" id="2253391" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11154.html" id="ALSA-2024:11154" type="self" title="ALSA-2024:11154"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bluez-libs-devel" version="5.63" release="3.el8_10.alma.1" epoch="0" arch="aarch64" src="bluez-5.63-3.el8_10.alma.1.src.rpm">
          <filename>bluez-libs-devel-5.63-3.el8_10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">10dc3a1d2e47b3aa419e3352a33cd76dff2461f72726180ef460aed3de3dda21</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11192</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:44:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11192" id="RHSA-2024:11192" type="rhsa" title="RHSA-2024:11192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50612" id="CVE-2024-50612" type="cve" title="CVE-2024-50612"/>
      <reference href="https://bugzilla.redhat.com/2322057" id="2322057" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11192.html" id="ALSA-2024:11192" type="self" title="ALSA-2024:11192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libsndfile-devel" version="1.0.28" release="16.el8_10" epoch="0" arch="aarch64" src="libsndfile-1.0.28-16.el8_10.src.rpm">
          <filename>libsndfile-devel-1.0.28-16.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1937295b66a0c24bfa3b197a3af5c76f4dd65a8e745640738052b8713b2ef7c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11193</id>
    <title>Moderate: mpg123 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:42:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mpg123 security update</summary>
    <description>The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.  

Security Fix(es):  

  * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11193" id="RHSA-2024:11193" type="rhsa" title="RHSA-2024:11193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10573" id="CVE-2024-10573" type="cve" title="CVE-2024-10573"/>
      <reference href="https://bugzilla.redhat.com/2322980" id="2322980" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11193.html" id="ALSA-2024:11193" type="self" title="ALSA-2024:11193"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mpg123-devel" version="1.32.9" release="1.el8_10" epoch="0" arch="aarch64" src="mpg123-1.32.9-1.el8_10.src.rpm">
          <filename>mpg123-devel-1.32.9-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">da0387630b06e51c3628b6e9e4760f82281d36b96ac2ab0ffb91c15ea94874cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1308</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:56:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1308" id="RHSA-2024:1308" type="rhsa" title="RHSA-2024:1308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1308.html" id="ALSA-2024:1308" type="self" title="ALSA-2024:1308"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.117" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.117-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">fb4643e662a437804e83a5e89ca9949fe170ab839242ea0f8b8044654ca9f014</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1311</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:41:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1311" id="RHSA-2024:1311" type="rhsa" title="RHSA-2024:1311"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1311.html" id="ALSA-2024:1311" type="self" title="ALSA-2024:1311"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.103" release="1.el8_9" epoch="0" arch="aarch64" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.103-1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">27aaece6d487b3eda1e35003a18567507f7c31db6f6b3ae8ed14fa04dbb9c144</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1607</id>
    <title>Important: kernel security, bug fix, and enhancement update</title>
    <issued date="2024-04-02 00:00:00"/>
    <updated date="2024-04-09 14:56:29"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)
* kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (CVE-2023-6931)
* kernel: GSM multiplexing race condition leads to privilege escalation (CVE-2023-6546,ZDI-CAN-20527)
* kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (CVE-2024-0565)
* kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (CVE-2023-51042)
* kernel: ext4: kernel bug in ext4_write_inline_data_end() (CVE-2021-33631)
* kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (CVE-2024-1086)

Bug Fix(es):

* OCP 4.12 crashed due to use-after-free in libceph in rhel8 (JIRA:AlmaLinux-21394)
* kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function (JIRA:AlmaLinux-24010)
* Screen floods with random colour suggesting something not initialised (JIRA:AlmaLinux-21055)
* kernel: vmxgfx: NULL pointer dereference in vmw_cmd_dx_define_query (JIRA:AlmaLinux-22766)
* tx-checksumming required for accessing port in OpenShift for AlmaLinux 8.6 (JIRA:AlmaLinux-20822)
* kernel: CIFS Filesystem Decryption Improper Input Validation Remote Code Execution Vulnerability in function receive_encrypted_standard of client (JIRA:AlmaLinux-22077)
* kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size (JIRA:AlmaLinux-22930)
* rbd: don't move requests to the running list on errors [8.x] (JIRA:AlmaLinux-24204)
* kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c (JIRA:AlmaLinux-24479)
* ceph: several cap and snap fixes (JIRA:AlmaLinux-20909)
* [RHVH] Migration hangs between RHVH release bellow 4.5.1 and RHVH over or equal 4.5.2 release (JIRA:AlmaLinux-23063)
* unable to access smsc95xx based interface unless you start outgoing traffic.  (JIRA:AlmaLinux-25719)
* [AlmaLinux8] ] BUG bio-696 (Not tainted): Poison overwritten  (JIRA:AlmaLinux-26101)
* kernel: GSM multiplexing race condition leads to privilege escalation (JIRA:AlmaLinux-19954)
* backport smartpqi: fix disable_managed_interrupts (JIRA:AlmaLinux-26139)
* kernel: ext4: kernel bug in ext4_write_inline_data_end() (JIRA:AlmaLinux-26331)
* ceph: always check dir caps asynchronously (JIRA:AlmaLinux-27496)

Enhancement(s):

* [IBM 8.10 FEAT] Upgrade the qeth driver to latest from upstream, e.g. kernel 6.4 (JIRA:AlmaLinux-25811)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1607" id="RHSA-2024:1607" type="rhsa" title="RHSA-2024:1607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-33631" id="CVE-2021-33631" type="cve" title="CVE-2021-33631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38096" id="CVE-2022-38096" type="cve" title="CVE-2022-38096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51042" id="CVE-2023-51042" type="cve" title="CVE-2023-51042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6546" id="CVE-2023-6546" type="cve" title="CVE-2023-6546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6931" id="CVE-2023-6931" type="cve" title="CVE-2023-6931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0565" id="CVE-2024-0565" type="cve" title="CVE-2024-0565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1086" id="CVE-2024-1086" type="cve" title="CVE-2024-1086"/>
      <reference href="https://bugzilla.redhat.com/2133452" id="2133452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2252731" id="2252731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255498" id="2255498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258518" id="2258518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2259866" id="2259866" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2261976" id="2261976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2262126" id="2262126" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1607.html" id="ALSA-2024:1607" type="self" title="ALSA-2024:1607"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="513.24.1.el8_9" epoch="0" arch="aarch64" src="kernel-4.18.0-513.24.1.el8_9.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-513.24.1.el8_9.aarch64.rpm</filename>
          <sum type="sha256">2a24c147331df013197d5526b8377feb42b5b6078f1ee7a236d6c1ee2e7a55b8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1608</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2024-04-02 00:00:00"/>
    <updated date="2024-04-03 18:46:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Security Fix(es):

* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1608" id="RHSA-2024:1608" type="rhsa" title="RHSA-2024:1608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0914" id="CVE-2024-0914" type="cve" title="CVE-2024-0914"/>
      <reference href="https://bugzilla.redhat.com/2260407" id="2260407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1608.html" id="ALSA-2024:1608" type="self" title="ALSA-2024:1608"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="opencryptoki-devel" version="3.21.0" release="10.el8_9.alma.1" epoch="0" arch="aarch64" src="opencryptoki-3.21.0-10.el8_9.alma.1.src.rpm">
          <filename>opencryptoki-devel-3.21.0-10.el8_9.alma.1.aarch64.rpm</filename>
          <sum type="sha256">377ff0f220a0699949cb58363749d86ac2a709ca0f39dfec18ab13e3f8b3d87c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1781</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 18:44:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)
* bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1781" id="RHSA-2024:1781" type="rhsa" title="RHSA-2024:1781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1781.html" id="ALSA-2024:1781" type="self" title="ALSA-2024:1781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.16.el8_9.2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">201414030854ad82a3b65eb89dcf7499dc6b50d6f59cd3c15bd2ed97aeab9ec8</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.16.el8_9.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">4e921c16c9bc370a4cd96b878ead640cf36106e8a3d902ffcef8e7619a6e4f64</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.16.el8_9.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">9aa0b5ce2ad36cee36344a56133c6e27f97c17ea6a46cd6cfeac1bc0c87e24e4</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.16.el8_9.2.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ec7187a5c6c01e9422d3d8593d226cbc2e873c0863e37e201bda488b6a04f9ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1818</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-19 13:03:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1818" id="RHSA-2024:1818" type="rhsa" title="RHSA-2024:1818"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21085" id="CVE-2024-21085" type="cve" title="CVE-2024-21085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275001" id="2275001" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1818.html" id="ALSA-2024:1818" type="self" title="ALSA-2024:1818"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2ac06a282d9115e7447e7c667819e3f24936f9ab5f65c8d4d6ae42995bb4dc0d</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3e59acbcee571257ece79315cd3be0d9de934f1b5bffa0f6544d2d29ccfe6cac</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3ecfe85c080d2f02839737eaa95adc1a638881dcdb84cac1dbf38dd378b179ad</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">52b4e527a00c272842da597af619ff0df9f9d0b88c8afbe1ddf48d4c2d7c277e</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5310e16b937d263cb1b1f9315738157f948ceeef5da4bd15d1d2360f0326f944</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">620bafd8cd299fbfa4d813c5ea32b014c1c499362e2526f9f0b65ecd471b8455</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">77e2eff4ea18397a686a7a67c77b9fc829f1391096bc42c05642b9a693d3d635</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">95ff5e182fdea2cd53db3d90d9b4c13ebdfadd5223f66cd9609b8e8b6a50fb97</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9ec8e7726efdea5866749c6ffb7c655044458ee72b28de147c34e44232b84d29</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b74c39b6b98028b49f66e3388e6effc97e5a71972259608e284c7a08c90b50e6</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c262caa4aa2667322c6cb4f98bd9a920bfd24543d17c500b5b4b7604523dfce9</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.412.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.412.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.412.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ed78416f8c3fb8a47c4da9f74288705a1b84a9515836af22ee38c596ba6fea00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1825</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 13:46:25"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1825" id="RHSA-2024:1825" type="rhsa" title="RHSA-2024:1825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1825.html" id="ALSA-2024:1825" type="self" title="ALSA-2024:1825"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0591e5a8fe9e985ba4fa4cbaf8147da026c382d9081f043efac091ff797e352f</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">05d3d65e7fe58af4721965f5a1a3441ca55352e4b3a23821425c4e0e6631dcbb</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">07cd8e7964b10cc841c18126578db554688f04f71a8a07d3bfe3503085c4656f</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">27490e327104be585f756a5b96624b84aacb98f114fe1b4dae27be4dc69bd066</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">2c3ee2f321503ebb6e02b07232259f845f582e8bcd6f4bb19eccbca35a12339c</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">33df75554ecc15f250e51df5d438a5c8e66e1854c0945a17027dbba67c6cf615</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">34918065e8ae2f2e966e676a7ec5e8747691cee0ae69de6b89989096e2b68086</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">586adc12c8bcbf07a1259400861fd57b896414d504a8d8592d4233e1502f3236</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7f946ef506ea907d821f00a497dc6749abc0ecfff16437eb74a6309f68d23197</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9b5356679828214fca1b1a3a5f3631244025e59ae55bb517248dc6c777bbeb14</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9ed36e781a014eb1b4d6a212911a5bfb7c7d742d43ec2dd1d23a51820f6e7195</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ce7822116b87bc8cbff77c348c5e4919e5d3f6b61bbf56c388c6003003535964</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d0e722439e5f25f55fc94f4ceb8229a346af1d405501246edab1972587defc3d</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">eed8ca2f6a646405ca0401ab486fc3cc38ac755e73820ea3c48e0a45eeb56af5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2722</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-07 00:00:00"/>
    <updated date="2024-05-09 12:08:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2722" id="RHSA-2024:2722" type="rhsa" title="RHSA-2024:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2722.html" id="ALSA-2024:2722" type="self" title="ALSA-2024:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="glibc-nss-devel" version="2.28" release="236.el8_9.13" epoch="0" arch="aarch64" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-nss-devel-2.28-236.el8_9.13.aarch64.rpm</filename>
          <sum type="sha256">1040b1dab8435d009d340c4aca3938c7f1fc8baf9c81bcee1f6acfcc6aec2c31</sum>
        </package>
        <package name="glibc-static" version="2.28" release="236.el8_9.13" epoch="0" arch="aarch64" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-static-2.28-236.el8_9.13.aarch64.rpm</filename>
          <sum type="sha256">39e095652d8e2a4373a1fef933080bf09a75d267ff6efff40d962a841788c4ea</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="236.el8_9.13" epoch="0" arch="aarch64" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-benchtests-2.28-236.el8_9.13.aarch64.rpm</filename>
          <sum type="sha256">42a4bb14df19b850127d16b06627d23be69519580a42f0b4e104105adb194963</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="236.el8_9.13" epoch="0" arch="aarch64" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>nss_hesiod-2.28-236.el8_9.13.aarch64.rpm</filename>
          <sum type="sha256">930c0d14008cc382d7d499dd7010a7d194a4f2dd41eebb951d24c99f40872534</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2966</id>
    <title>Low: ghostscript security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2966" id="RHSA-2024:2966" type="rhsa" title="RHSA-2024:2966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-21710" id="CVE-2020-21710" type="cve" title="CVE-2020-21710"/>
      <reference href="https://bugzilla.redhat.com/2235001" id="2235001" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2966.html" id="ALSA-2024:2966" type="self" title="ALSA-2024:2966"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="ghostscript-tools-printing" version="9.27" release="12.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-tools-printing-9.27-12.el8.aarch64.rpm</filename>
          <sum type="sha256">18dfebf8528b09af2ee4087a48d68e072f9423c4719754ff869ff141dfa782ac</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="12.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>libgs-devel-9.27-12.el8.aarch64.rpm</filename>
          <sum type="sha256">548c936c1229a0c18171d9362a382a1a2423e47fd4e33539ae63841172e172d8</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.27" release="12.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-12.el8.aarch64.rpm</filename>
          <sum type="sha256">80ebd1ce63f09f244d85df045f2873a5a10efceb85ed6bf6781ce29028434f65</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="12.el8" epoch="0" arch="aarch64" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-12.el8.aarch64.rpm</filename>
          <sum type="sha256">aa5750bf34d9c2706327d0bbad6b15896675b34790235ce19c0ae20a29c39fc0</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="12.el8" epoch="0" arch="noarch" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-doc-9.27-12.el8.noarch.rpm</filename>
          <sum type="sha256">ec96699116e45963779afab6f3fd5a2b3d356359af86f11461c8ab3ba9219ca4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2979</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:40"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: NULL pointer dereference in `FoFiType1C::convertToType1` (CVE-2020-36024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2979" id="RHSA-2024:2979" type="rhsa" title="RHSA-2024:2979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36024" id="CVE-2020-36024" type="cve" title="CVE-2020-36024"/>
      <reference href="https://bugzilla.redhat.com/2231520" id="2231520" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2979.html" id="ALSA-2024:2979" type="self" title="ALSA-2024:2979"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="poppler-cpp" version="20.11.0" release="11.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-11.el8.aarch64.rpm</filename>
          <sum type="sha256">50acc2ad61fa1fe2ac25acfceb07f18d72f4f0b66419db5e1dc8e2ac6e76c7ae</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="11.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-11.el8.aarch64.rpm</filename>
          <sum type="sha256">709bbc19f3f490d17ba49c893bc03d97d849d326dcf2cd97e816a96307a7c750</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="11.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-11.el8.aarch64.rpm</filename>
          <sum type="sha256">8b7eecf81ec5a4faec8c53e4c821f3e4e9fbcf93a27d8102478ea148c013974d</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="11.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-devel-20.11.0-11.el8.aarch64.rpm</filename>
          <sum type="sha256">a67955409ad5b393daada5516116340c8e68e5a9081b80ea12eede9950d78301</sum>
        </package>
        <package name="poppler-glib-doc" version="20.11.0" release="11.el8" epoch="0" arch="noarch" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-glib-doc-20.11.0-11.el8.noarch.rpm</filename>
          <sum type="sha256">a88c0715ddece32f14d096585e9f3d9440404392a6958b95d633054e08ae973f</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="11.el8" epoch="0" arch="aarch64" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-11.el8.aarch64.rpm</filename>
          <sum type="sha256">e485dc3b0383b1070b4552e51e60b7bad94ecb3efb85b8a69a9ae20f0459d8e0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2985</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:49:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
* python-cryptography: memory corruption via immutable objects (CVE-2023-23931)
* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2985" id="RHSA-2024:2985" type="rhsa" title="RHSA-2024:2985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40897" id="CVE-2022-40897" type="cve" title="CVE-2022-40897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23931" id="CVE-2023-23931" type="cve" title="CVE-2023-23931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2158559" id="2158559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171817" id="2171817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2985.html" id="ALSA-2024:2985" type="self" title="ALSA-2024:2985"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <module name="python39" stream="3.9" version="8100020240407120707" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-debug" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="aarch64" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-debug-3.9.18-3.module_el8.10.0+3765+2f9a457d.aarch64.rpm</filename>
          <sum type="sha256">7b944d7713f477bf8721902009a488d9b45bb891b7bf432986eccedb7a922854</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2995</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:20:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2995" id="RHSA-2024:2995" type="rhsa" title="RHSA-2024:2995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2995.html" id="ALSA-2024:2995" type="self" title="ALSA-2024:2995"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="22.el8" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-22.el8.aarch64.rpm</filename>
          <sum type="sha256">8c0017f7bc8e856af0ec9382ebb90cb6cbd3038aed46570ff21785da8c91f588</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="22.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-22.el8.noarch.rpm</filename>
          <sum type="sha256">d9e3688317f11fecbde68151cfa0b30b79f3ea6a4b9bd877ac51cf2aae410829</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3005</id>
    <title>Moderate: python-pillow security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:44:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (CVE-2023-44271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3005" id="RHSA-2024:3005" type="rhsa" title="RHSA-2024:3005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44271" id="CVE-2023-44271" type="cve" title="CVE-2023-44271"/>
      <reference href="https://bugzilla.redhat.com/2247820" id="2247820" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3005.html" id="ALSA-2024:3005" type="self" title="ALSA-2024:3005"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="python3-pillow-devel" version="5.1.1" release="20.el8" epoch="0" arch="aarch64" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-devel-5.1.1-20.el8.aarch64.rpm</filename>
          <sum type="sha256">21703126c51c021ebbb749f5158aec99db70d35fa82dca72c092b058305ef4a0</sum>
        </package>
        <package name="python3-pillow-doc" version="5.1.1" release="20.el8" epoch="0" arch="noarch" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-doc-5.1.1-20.el8.noarch.rpm</filename>
          <sum type="sha256">87ed7f6dcb6fab004a9a9a7b3362d9ae596f2240b983e6ed92115e7dc2bcc5a9</sum>
        </package>
        <package name="python3-pillow-tk" version="5.1.1" release="20.el8" epoch="0" arch="aarch64" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-tk-5.1.1-20.el8.aarch64.rpm</filename>
          <sum type="sha256">9945704ecfe7fca65e69404c42772c137ce4ad81f123ce85c9db79284fa1decc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3008</id>
    <title>Important: pmix security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pmix security update</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3008" id="RHSA-2024:3008" type="rhsa" title="RHSA-2024:3008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915"/>
      <reference href="https://bugzilla.redhat.com/2238898" id="2238898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3008.html" id="ALSA-2024:3008" type="self" title="ALSA-2024:3008"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="pmix-devel" version="2.2.5" release="3.el8" epoch="0" arch="aarch64" src="pmix-2.2.5-3.el8.src.rpm">
          <filename>pmix-devel-2.2.5-3.el8.aarch64.rpm</filename>
          <sum type="sha256">8f4b726638eb1af70678a9fa5e946c27a7df2a53034456188b87dc68518f2c29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3030</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3030" id="RHSA-2024:3030" type="rhsa" title="RHSA-2024:3030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33065" id="CVE-2022-33065" type="cve" title="CVE-2022-33065"/>
      <reference href="https://bugzilla.redhat.com/2238934" id="2238934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3030.html" id="ALSA-2024:3030" type="self" title="ALSA-2024:3030"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="libsndfile-devel" version="1.0.28" release="14.el8" epoch="0" arch="aarch64" src="libsndfile-1.0.28-14.el8.src.rpm">
          <filename>libsndfile-devel-1.0.28-14.el8.aarch64.rpm</filename>
          <sum type="sha256">64014f14b38b707fa01ffa0f3c9fe26212185355f61d41a4c20b84b72c2ea1bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3056</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714)
* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3056" id="RHSA-2024:3056" type="rhsa" title="RHSA-2024:3056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51714" id="CVE-2023-51714" type="cve" title="CVE-2023-51714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25580" id="CVE-2024-25580" type="cve" title="CVE-2024-25580"/>
      <reference href="https://bugzilla.redhat.com/2255856" id="2255856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264423" id="2264423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3056.html" id="ALSA-2024:3056" type="self" title="ALSA-2024:3056"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="qt5-qtbase-static" version="5.15.3" release="7.el8" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-7.el8.aarch64.rpm</filename>
          <sum type="sha256">df7b0f4fe23737e25ed78a8905dfc34c1c14c83b93e05a136f6239f6bbc0f69a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3059</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3059" id="RHSA-2024:3059" type="rhsa" title="RHSA-2024:3059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4645" id="CVE-2022-4645" type="cve" title="CVE-2022-4645"/>
      <reference href="https://bugzilla.redhat.com/2176220" id="2176220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3059.html" id="ALSA-2024:3059" type="self" title="ALSA-2024:3059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="libtiff-tools" version="4.0.9" release="31.el8" epoch="0" arch="aarch64" src="libtiff-4.0.9-31.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-31.el8.aarch64.rpm</filename>
          <sum type="sha256">ae0a51c91ddb9c540dae1410933c9d13aba0aacff908f0423dae2e39d2496b64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3060</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3060" id="RHSA-2024:3060" type="rhsa" title="RHSA-2024:3060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476"/>
      <reference href="https://bugzilla.redhat.com/2254587" id="2254587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254588" id="2254588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254589" id="2254589" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3060.html" id="ALSA-2024:3060" type="self" title="ALSA-2024:3060"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="4.el8" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.16.1-4.el8.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7a03e2d11b757fd7e6d8d2a0d488d0e9e3178df69e634b880c7d6da5b14c32c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3062</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3062" id="RHSA-2024:3062" type="rhsa" title="RHSA-2024:3062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3062.html" id="ALSA-2024:3062" type="self" title="ALSA-2024:3062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="python3.11-test" version="3.11.7" release="1.el8" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-test-3.11.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">561a8f74e3ee9c13e6dab96b602f1bfed08f6c4146d9743702da3389e07b4278</sum>
        </package>
        <package name="python3.11-idle" version="3.11.7" release="1.el8" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ca63a98ffad484510e0f6e376070c9e91870437894bdb0fa64c403fe6856c319</sum>
        </package>
        <package name="python3.11-debug" version="3.11.7" release="1.el8" epoch="0" arch="aarch64" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">de13fc7d815fdf2dda3a0d2dd7bed169ebabf82dd5651865998ee73c0287d2a4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3066</id>
    <title>Moderate: exempi security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>exempi security update</summary>
    <description>Exempi provides a library for easy parsing of XMP metadata.

Security Fix(es):

* exempi: denial of service via opening of crafted audio file with ID3V2 frame (CVE-2020-18651)
* exempi: denial of service via opening of crafted webp file (CVE-2020-18652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3066" id="RHSA-2024:3066" type="rhsa" title="RHSA-2024:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18651" id="CVE-2020-18651" type="cve" title="CVE-2020-18651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18652" id="CVE-2020-18652" type="cve" title="CVE-2020-18652"/>
      <reference href="https://bugzilla.redhat.com/2235669" id="2235669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235673" id="2235673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3066.html" id="ALSA-2024:3066" type="self" title="ALSA-2024:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="exempi-devel" version="2.4.5" release="4.el8" epoch="0" arch="aarch64" src="exempi-2.4.5-4.el8.src.rpm">
          <filename>exempi-devel-2.4.5-4.el8.aarch64.rpm</filename>
          <sum type="sha256">7521a079cd788772c4cddc0a74b5207f70a0d08ca5aeaed1b745312abe301c4e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3127</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3127" id="RHSA-2024:3127" type="rhsa" title="RHSA-2024:3127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770"/>
      <reference href="https://bugzilla.redhat.com/2246907" id="2246907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3127.html" id="ALSA-2024:3127" type="self" title="ALSA-2024:3127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="zziplib-devel" version="0.13.68" release="13.el8_10" epoch="0" arch="aarch64" src="zziplib-0.13.68-13.el8_10.src.rpm">
          <filename>zziplib-devel-0.13.68-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">9783875a9dc0cb0729cc749b0e6204f9c6732ad244ac90ec480938e737b4f027</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3138</id>
    <title>Moderate: kernel security, bug fix, and enhancement update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security, bug fix, and enhancement update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3138" id="RHSA-2024:3138" type="rhsa" title="RHSA-2024:3138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-13631" id="CVE-2019-13631" type="cve" title="CVE-2019-13631"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-15505" id="CVE-2019-15505" type="cve" title="CVE-2019-15505"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-25656" id="CVE-2020-25656" type="cve" title="CVE-2020-25656"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3753" id="CVE-2021-3753" type="cve" title="CVE-2021-3753"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4204" id="CVE-2021-4204" type="cve" title="CVE-2021-4204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0500" id="CVE-2022-0500" type="cve" title="CVE-2022-0500"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-23222" id="CVE-2022-23222" type="cve" title="CVE-2022-23222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3565" id="CVE-2022-3565" type="cve" title="CVE-2022-3565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45934" id="CVE-2022-45934" type="cve" title="CVE-2022-45934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1513" id="CVE-2023-1513" type="cve" title="CVE-2023-1513"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24023" id="CVE-2023-24023" type="cve" title="CVE-2023-24023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25775" id="CVE-2023-25775" type="cve" title="CVE-2023-25775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28464" id="CVE-2023-28464" type="cve" title="CVE-2023-28464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-31083" id="CVE-2023-31083" type="cve" title="CVE-2023-31083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3567" id="CVE-2023-3567" type="cve" title="CVE-2023-3567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37453" id="CVE-2023-37453" type="cve" title="CVE-2023-37453"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38409" id="CVE-2023-38409" type="cve" title="CVE-2023-38409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39189" id="CVE-2023-39189" type="cve" title="CVE-2023-39189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39192" id="CVE-2023-39192" type="cve" title="CVE-2023-39192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39193" id="CVE-2023-39193" type="cve" title="CVE-2023-39193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39194" id="CVE-2023-39194" type="cve" title="CVE-2023-39194"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-39198" id="CVE-2023-39198" type="cve" title="CVE-2023-39198"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4133" id="CVE-2023-4133" type="cve" title="CVE-2023-4133"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4244" id="CVE-2023-4244" type="cve" title="CVE-2023-4244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42754" id="CVE-2023-42754" type="cve" title="CVE-2023-42754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42755" id="CVE-2023-42755" type="cve" title="CVE-2023-42755"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45863" id="CVE-2023-45863" type="cve" title="CVE-2023-45863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51779" id="CVE-2023-51779" type="cve" title="CVE-2023-51779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51780" id="CVE-2023-51780" type="cve" title="CVE-2023-51780"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52340" id="CVE-2023-52340" type="cve" title="CVE-2023-52340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52434" id="CVE-2023-52434" type="cve" title="CVE-2023-52434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52448" id="CVE-2023-52448" type="cve" title="CVE-2023-52448"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52489" id="CVE-2023-52489" type="cve" title="CVE-2023-52489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52574" id="CVE-2023-52574" type="cve" title="CVE-2023-52574"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52580" id="CVE-2023-52580" type="cve" title="CVE-2023-52580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52581" id="CVE-2023-52581" type="cve" title="CVE-2023-52581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52620" id="CVE-2023-52620" type="cve" title="CVE-2023-52620"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6121" id="CVE-2023-6121" type="cve" title="CVE-2023-6121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6176" id="CVE-2023-6176" type="cve" title="CVE-2023-6176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6622" id="CVE-2023-6622" type="cve" title="CVE-2023-6622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6915" id="CVE-2023-6915" type="cve" title="CVE-2023-6915"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6932" id="CVE-2023-6932" type="cve" title="CVE-2023-6932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0841" id="CVE-2024-0841" type="cve" title="CVE-2024-0841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25742" id="CVE-2024-25742" type="cve" title="CVE-2024-25742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25743" id="CVE-2024-25743" type="cve" title="CVE-2024-25743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26602" id="CVE-2024-26602" type="cve" title="CVE-2024-26602"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26609" id="CVE-2024-26609" type="cve" title="CVE-2024-26609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26671" id="CVE-2024-26671" type="cve" title="CVE-2024-26671"/>
      <reference href="https://bugzilla.redhat.com/1731000" id="1731000" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1746732" id="1746732" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1888726" id="1888726" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1999589" id="1999589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2039178" id="2039178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2043520" id="2043520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044578" id="2044578" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2150953" id="2150953" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151959" id="2151959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2177759" id="2177759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179892" id="2179892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213132" id="2213132" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218332" id="2218332" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2219359" id="2219359" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221039" id="2221039" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221463" id="2221463" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221702" id="2221702" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226777" id="2226777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226784" id="2226784" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226787" id="2226787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2226788" id="2226788" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2230042" id="2230042" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2231410" id="2231410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235306" id="2235306" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239845" id="2239845" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2239847" id="2239847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244720" id="2244720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2250043" id="2250043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253632" id="2253632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254961" id="2254961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254982" id="2254982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255283" id="2255283" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256490" id="2256490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256822" id="2256822" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257682" id="2257682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257979" id="2257979" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265285" id="2265285" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265653" id="2265653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267695" id="2267695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267750" id="2267750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267760" id="2267760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267761" id="2267761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269189" id="2269189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269217" id="2269217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270836" id="2270836" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270883" id="2270883" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272811" id="2272811" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3138.html" id="ALSA-2024:3138" type="self" title="ALSA-2024:3138"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c234f8530a494af206ef3f14a2f3ae0fa2a231b524aa118edb999ea7ec976613</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3258</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:43:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3258" id="RHSA-2024:3258" type="rhsa" title="RHSA-2024:3258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3258.html" id="ALSA-2024:3258" type="self" title="ALSA-2024:3258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="23.el8_10" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-23.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0c16a3e75df4aa9412f24b2266bbabe040389239593e453d58e24fea8701b3f1</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="23.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-23.el8_10.noarch.rpm</filename>
          <sum type="sha256">acff5990f645ca968a965a1d1b002fc3b079fc7c7f6701bad377e87de193a0ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3269</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:15:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3269" id="RHSA-2024:3269" type="rhsa" title="RHSA-2024:3269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3269.html" id="ALSA-2024:3269" type="self" title="ALSA-2024:3269"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.1" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">5aeab2970c91a8001aec7519e10fe98187cce8ba71ecf78c7107b7bde379de2b</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.1" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">ac0ad5b4929dd036ccd4fff265d1b519a0ac3c22ab6721d7b3174fdad8f7d758</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.1" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">e3e38b933ef218e10f7a5ab41e63dbaffa9266c3cf94cf75a1e62b0f1953ec32</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.1" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">f57c5cd800aaeb1f023c9e4d258f42f5f1a911da46e898bf54f19531423c41f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3270</id>
    <title>Moderate: sssd security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3270" id="RHSA-2024:3270" type="rhsa" title="RHSA-2024:3270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3270.html" id="ALSA-2024:3270" type="self" title="ALSA-2024:3270"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.4" release="3.el8_10" epoch="0" arch="aarch64" src="sssd-2.9.4-3.el8_10.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">70bc279e93bf6692d261ce23aa9eb97e2f5dcd2f6661847b43d05427362a8174</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3340</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:39:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3340" id="RHSA-2024:3340" type="rhsa" title="RHSA-2024:3340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3340.html" id="ALSA-2024:3340" type="self" title="ALSA-2024:3340"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.119" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">28ddc52d793093c690b2620c69c62152c0c0e9af43cddee002265097cf1acc98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3341</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:40:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended
by loadable modules for new image formats. It is used by toolkits such as GTK+
or clutter.

Security Fix(es):

* gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3341" id="RHSA-2024:3341" type="rhsa" title="RHSA-2024:3341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48622" id="CVE-2022-48622" type="cve" title="CVE-2022-48622"/>
      <reference href="https://bugzilla.redhat.com/2260545" id="2260545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3341.html" id="ALSA-2024:3341" type="self" title="ALSA-2024:3341"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="6.el8_10" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-6.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">185bf5692bd2ad4c340748fd032b034270b1e71edc2162004178228e6e930d92</sum>
        </package>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="6.el8_10" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-6.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4c8aaba11600b0881a736381eeb113273eecfb8f024a2c258a8cdc491b9aecf5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3344</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:43:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread
libraries (libpthread), standard math libraries (libm), and the name service
cache daemon (nscd) used by multiple programs on the system. Without these
libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3344" id="RHSA-2024:3344" type="rhsa" title="RHSA-2024:3344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3344.html" id="ALSA-2024:3344" type="self" title="ALSA-2024:3344"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.2" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">5771040953fa3ad3ec1df9203482c0776e700327d422ae17e1e22997efa432af</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.2" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">933d49081e50795da2775f34572ab9b29ef684eed7556cc1bba9218da9c91b1d</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.2" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">990963c2f18aada9d66a78c1778dab05c29bafbf7a7364c1348f16c3d826ac8b</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.2" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">c4342d10d9d0eb28d0506f6f685e01ebeea1ffdd97acf9d573f4f6dc568fbbd9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3345</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:39:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3345" id="RHSA-2024:3345" type="rhsa" title="RHSA-2024:3345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3345.html" id="ALSA-2024:3345" type="self" title="ALSA-2024:3345"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_9_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.105" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ad1fd75497c6cb218a89fce788182fc8475a38c3e54599a643f7f18bef8387df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3466</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-05-29 00:00:00"/>
    <updated date="2024-05-31 15:25:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
* python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3466" id="RHSA-2024:3466" type="rhsa" title="RHSA-2024:3466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3651" id="CVE-2024-3651" type="cve" title="CVE-2024-3651"/>
      <reference href="https://bugzilla.redhat.com/2274779" id="2274779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3466.html" id="ALSA-2024:3466" type="self" title="ALSA-2024:3466"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240530164632" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-debug" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="aarch64" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-debug-3.9.19-1.module_el8.10.0+3849+a48d89aa.aarch64.rpm</filename>
          <sum type="sha256">6a0c9189d16c4cc5f21f6086054e1a29a9bb788128d39bc376236f0bc1725541</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3618</id>
    <title>Moderate: kernel update</title>
    <issued date="2024-06-05 00:00:00"/>
    <updated date="2024-06-05 17:12:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Marvin vulnerability side-channel leakage in the RSA decryption
operation (CVE-2023-6240)
* kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()
(CVE-2024-0340)
* kernel: untrusted VMM can trigger int80 syscall handling (CVE-2024-25744)
* kernel: i2c: i801: Fix block process call transactions (CVE-2024-26593)
* kernel: pvrusb2: fix use after free on context disconnection (CVE-2023-52445)
* kernel: x86/fpu: Stop relying on userspace for info to fault in xsave buffer
that cause loop forever (CVE-2024-26603)
* kernel: use after free in i2c (CVE-2019-25162)
* kernel: i2c: validate user data in compat ioctl (CVE-2021-46934)
* kernel: media: dvbdev: Fix memory leak in dvb_media_device_free()
(CVE-2020-36777)
* kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors
(CVE-2023-52477)
* kernel: mtd: require write permissions for locking and badblock ioctls
(CVE-2021-47055)
* kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump
(CVE-2024-26615)
* kernel: vt: fix memory overlapping when deleting chars in the buffer
(CVE-2022-48627)
* kernel: Integer Overflow in raid5_cache_count (CVE-2024-23307)
* kernel: media: uvcvideo: out-of-bounds read in uvc_query_v4l2_menu()
(CVE-2023-52565)
* kernel: net: bridge: data races indata-races in br_handle_frame_finish()
(CVE-2023-52578)
* kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
(CVE-2023-52528)
* kernel: platform/x86: think-lmi: Fix reference leak (CVE-2023-52520)
* kernel: RDMA/siw: Fix connection failure handling (CVE-2023-52513)
* kernel: pid: take a reference when initializing `cad_pid` (CVE-2021-47118)
* kernel: net/sched: act_ct: fix skb leak and crash on ooo frags
(CVE-2023-52610)
* kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set
with timeout (CVE-2024-26643)
* kernel: netfilter: nf_tables: disallow anonymous set with timeout flag
(CVE-2024-26642)
* kernel: i2c: i801: Don&amp;#39;t generate an interrupt on bus reset
(CVE-2021-47153)
* kernel: xhci: handle isoc Babble and Buffer Overrun events properly
(CVE-2024-26659)
* kernel: hwmon: (coretemp) Fix out-of-bounds memory access (CVE-2024-26664)
* kernel: wifi: mac80211: fix race condition on enabling fast-xmit
(CVE-2024-26779)
* kernel: RDMA/srpt: Support specifying the srpt_service_guid parameter
(CVE-2024-26744)
* kernel: RDMA/qedr: Fix qedr_create_user_qp error flow (CVE-2024-26743)
* kernel: tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
(CVE-2021-47185)
* kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
(CVE-2024-26901)
* kernel: RDMA/srpt: Do not register event handler until srpt device is fully
setup (CVE-2024-26872)
* kernel: usb: ulpi: Fix debugfs directory leak (CVE-2024-26919)
* kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964)
* kernel: USB: core: Fix deadlock in usb_deauthorize_interface()
(CVE-2024-26934)
* kernel: USB: core: Fix deadlock in port &amp;#34;disable&amp;#34; sysfs attribute
(CVE-2024-26933)
* kernel: fs: sysfs: Fix reference leak in sysfs_break_active_protection()
(CVE-2024-26993)
* kernel: fat: fix uninitialized field in nostale filehandles (CVE-2024-26973)
* kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
(CVE-2024-27059)
* kernel: net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (CVE-2021-47013)
* kernel: net: usb: fix memory leak in smsc75xx_bind (CVE-2021-47171)
* kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669)
* kernel: uio: Fix use-after-free in uio_open (CVE-2023-52439)
* kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (CVE-2023-52594)
* kernel: wifi: rt2x00: restart beacon queue when hardware reset (CVE-2023-52595)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3618" id="RHSA-2024:3618" type="rhsa" title="RHSA-2024:3618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-25162" id="CVE-2019-25162" type="cve" title="CVE-2019-25162"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36777" id="CVE-2020-36777" type="cve" title="CVE-2020-36777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46934" id="CVE-2021-46934" type="cve" title="CVE-2021-46934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47013" id="CVE-2021-47013" type="cve" title="CVE-2021-47013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47055" id="CVE-2021-47055" type="cve" title="CVE-2021-47055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47118" id="CVE-2021-47118" type="cve" title="CVE-2021-47118"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47153" id="CVE-2021-47153" type="cve" title="CVE-2021-47153"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47171" id="CVE-2021-47171" type="cve" title="CVE-2021-47171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47185" id="CVE-2021-47185" type="cve" title="CVE-2021-47185"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48627" id="CVE-2022-48627" type="cve" title="CVE-2022-48627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48669" id="CVE-2022-48669" type="cve" title="CVE-2022-48669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52439" id="CVE-2023-52439" type="cve" title="CVE-2023-52439"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52445" id="CVE-2023-52445" type="cve" title="CVE-2023-52445"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52477" id="CVE-2023-52477" type="cve" title="CVE-2023-52477"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52513" id="CVE-2023-52513" type="cve" title="CVE-2023-52513"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52520" id="CVE-2023-52520" type="cve" title="CVE-2023-52520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52528" id="CVE-2023-52528" type="cve" title="CVE-2023-52528"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52565" id="CVE-2023-52565" type="cve" title="CVE-2023-52565"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52578" id="CVE-2023-52578" type="cve" title="CVE-2023-52578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52594" id="CVE-2023-52594" type="cve" title="CVE-2023-52594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52595" id="CVE-2023-52595" type="cve" title="CVE-2023-52595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52598" id="CVE-2023-52598" type="cve" title="CVE-2023-52598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52606" id="CVE-2023-52606" type="cve" title="CVE-2023-52606"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52607" id="CVE-2023-52607" type="cve" title="CVE-2023-52607"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52610" id="CVE-2023-52610" type="cve" title="CVE-2023-52610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6240" id="CVE-2023-6240" type="cve" title="CVE-2023-6240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0340" id="CVE-2024-0340" type="cve" title="CVE-2024-0340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23307" id="CVE-2024-23307" type="cve" title="CVE-2024-23307"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25744" id="CVE-2024-25744" type="cve" title="CVE-2024-25744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26593" id="CVE-2024-26593" type="cve" title="CVE-2024-26593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26603" id="CVE-2024-26603" type="cve" title="CVE-2024-26603"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26610" id="CVE-2024-26610" type="cve" title="CVE-2024-26610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26615" id="CVE-2024-26615" type="cve" title="CVE-2024-26615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26642" id="CVE-2024-26642" type="cve" title="CVE-2024-26642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26643" id="CVE-2024-26643" type="cve" title="CVE-2024-26643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26659" id="CVE-2024-26659" type="cve" title="CVE-2024-26659"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26664" id="CVE-2024-26664" type="cve" title="CVE-2024-26664"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26693" id="CVE-2024-26693" type="cve" title="CVE-2024-26693"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26694" id="CVE-2024-26694" type="cve" title="CVE-2024-26694"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26743" id="CVE-2024-26743" type="cve" title="CVE-2024-26743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26744" id="CVE-2024-26744" type="cve" title="CVE-2024-26744"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26779" id="CVE-2024-26779" type="cve" title="CVE-2024-26779"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26872" id="CVE-2024-26872" type="cve" title="CVE-2024-26872"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26892" id="CVE-2024-26892" type="cve" title="CVE-2024-26892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26897" id="CVE-2024-26897" type="cve" title="CVE-2024-26897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26901" id="CVE-2024-26901" type="cve" title="CVE-2024-26901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26919" id="CVE-2024-26919" type="cve" title="CVE-2024-26919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26933" id="CVE-2024-26933" type="cve" title="CVE-2024-26933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26934" id="CVE-2024-26934" type="cve" title="CVE-2024-26934"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26964" id="CVE-2024-26964" type="cve" title="CVE-2024-26964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26973" id="CVE-2024-26973" type="cve" title="CVE-2024-26973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26993" id="CVE-2024-26993" type="cve" title="CVE-2024-26993"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27014" id="CVE-2024-27014" type="cve" title="CVE-2024-27014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27048" id="CVE-2024-27048" type="cve" title="CVE-2024-27048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27052" id="CVE-2024-27052" type="cve" title="CVE-2024-27052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27056" id="CVE-2024-27056" type="cve" title="CVE-2024-27056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27059" id="CVE-2024-27059" type="cve" title="CVE-2024-27059"/>
      <reference href="https://bugzilla.redhat.com/2250843" id="2250843" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257406" id="2257406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263875" id="2263875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265271" id="2265271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265646" id="2265646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265654" id="2265654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265833" id="2265833" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266296" id="2266296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266446" id="2266446" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266746" id="2266746" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266841" id="2266841" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267038" id="2267038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267185" id="2267185" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267355" id="2267355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267509" id="2267509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267705" id="2267705" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267724" id="2267724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267758" id="2267758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267789" id="2267789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267797" id="2267797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267804" id="2267804" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268291" id="2268291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268293" id="2268293" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268309" id="2268309" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268315" id="2268315" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268317" id="2268317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269213" id="2269213" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269856" id="2269856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270080" id="2270080" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270879" id="2270879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270881" id="2270881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271469" id="2271469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271476" id="2271476" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272780" id="2272780" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272791" id="2272791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273092" id="2273092" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273094" id="2273094" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273223" id="2273223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273260" id="2273260" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273262" id="2273262" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274624" id="2274624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275645" id="2275645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275655" id="2275655" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275666" id="2275666" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275707" id="2275707" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275777" id="2275777" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278169" id="2278169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278237" id="2278237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278240" id="2278240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278268" id="2278268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278314" id="2278314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278356" id="2278356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278398" id="2278398" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278409" id="2278409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278417" id="2278417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278431" id="2278431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278537" id="2278537" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3618.html" id="ALSA-2024:3618" type="self" title="ALSA-2024:3618"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.5.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.5.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.5.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">179d7560560ab029117f8167d782f6b63af1876bbaeea1fc8a78e70a9def2e89</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3961</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:15:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3961" id="RHSA-2024:3961" type="rhsa" title="RHSA-2024:3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462"/>
      <reference href="https://bugzilla.redhat.com/2275981" id="2275981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3961.html" id="ALSA-2024:3961" type="self" title="ALSA-2024:3961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="flatpak-devel" version="1.12.9" release="1.el8_10" epoch="0" arch="aarch64" src="flatpak-1.12.9-1.el8_10.src.rpm">
          <filename>flatpak-devel-1.12.9-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1018df361b142bbec7b32dceb957c6583a9dabcbee57418f59d30bc403174ad0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4000</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 11:36:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4000" id="RHSA-2024:4000" type="rhsa" title="RHSA-2024:4000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871"/>
      <reference href="https://bugzilla.redhat.com/2283508" id="2283508" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4000.html" id="ALSA-2024:4000" type="self" title="ALSA-2024:4000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libgs-devel" version="9.27" release="13.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>libgs-devel-9.27-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">37fd2c39d3ef86b4b894f6a7a830ea07c5817feb7832c7abd38f4e73a54d5f4e</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="13.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">41658ba7d294e8f93af81da86c688aac513109ea12e28ed19670333bb70c00bc</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.27" release="13.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">953ca992e95ba56fa73eebb952027b7d23ffc091ac071c0a70e01229c017a6d1</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="13.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-tools-printing-9.27-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b6eebbe8390af7821792680743ea71c6308508f207dde384289bee6baf28426b</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="13.el8_10" epoch="0" arch="noarch" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-doc-9.27-13.el8_10.noarch.rpm</filename>
          <sum type="sha256">c9181a495aec69ce1beab0e8a8f490457499ea15a767a39378d1b3edcb8fcc33</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4058</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-06-24 00:00:00"/>
    <updated date="2024-06-24 12:16:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4058" id="RHSA-2024:4058" type="rhsa" title="RHSA-2024:4058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4058.html" id="ALSA-2024:4058" type="self" title="ALSA-2024:4058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-idle" version="3.11.9" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.9-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">45cf85ef20d104d21c9b6722508971c7e522350e956cb63353c794916f9764b4</sum>
        </package>
        <package name="python3.11-test" version="3.11.9" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.9-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c1a4f6265e8dd92327bca6c6d35d23ce7dd51bc0df013d1c77014dc3f449169b</sum>
        </package>
        <package name="python3.11-debug" version="3.11.9" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.9-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f37cb53080fb5bff069088acfd2d337b0f83833db1a2eff6659d5ea398fea8f6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4211</id>
    <title>Important: kernel security and bug fix update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-02 15:11:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security and bug fix update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack (CVE-2020-26555)
* kernel:TCP-spoofed ghost ACKs and leak leak initial sequence number (CVE-2023-52881,RHV-2024-1001)
* kernel: ovl: fix leaked dentry (CVE-2021-46972)
* kernel: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (CVE-2021-47073)
* kernel: mm/damon/vaddr-test: memory leak in damon_do_test_apply_three_regions() (CVE-2023-52560)
* kernel: ppp_async: limit MRU to 64K (CVE-2024-26675)
* kernel: mm/swap: fix race when skipping swapcache (CVE-2024-26759)
* kernel: net: ip_tunnel: prevent perpetual headroom growth (CVE-2024-26804)
* kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment (CVE-2024-26907)
* kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (CVE-2024-26906)
* kernel: powerpc/powernv: Add a null pointer check in opal_event_init() (CVE-2023-52686)
* kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (CVE-2023-52675)
* kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs (CVE-2023-5090)
* kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c (CVE-2023-52464)
* kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref (CVE-2024-26735)
* kernel: mptcp: fix data re-injection from stale subflow (CVE-2024-26826)
* kernel: net/bnx2x: Prevent access to a freed page in page_pool (CVE-2024-26859)
* kernel: crypto: qat - resolve race condition during AER recovery (CVE-2024-26974)
* kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups (CVE-2023-52667)
* kernel: net/mlx5: Properly link new fs rules into the tree (CVE-2024-35960)
* kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow (CVE-2024-35959)
* kernel: net: ena: Fix incorrect descriptor free behavior (CVE-2024-35958)
* kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (CVE-2024-36004)
* kernel: mISDN: fix possible use-after-free in HFC_cleanup() (CVE-2021-47356)
* kernel: udf: Fix NULL pointer dereference in udf_symlink function (CVE-2021-47353)
* kernel: net: ti: fix UAF in tlan_remove_one (CVE-2021-47310)

Bug Fix(es):

* Kernel panic - kernel BUG at mm/slub.c:376! (JIRA:AlmaLinux-29783)
* Temporary values in FIPS integrity test should be zeroized [almalinux-8.10.z] (JIRA:AlmaLinux-35361)
* AlmaLinux8.6 - kernel: s390/cpum_cf: make crypto counters upward compatible (JIRA:AlmaLinux-36048)
* [AlmaLinux8] blktests block/024 failed (JIRA:AlmaLinux-8130)
* AlmaLinux8.9: EEH injections results  Error:  Power fault on Port 0 and other call traces(Everest/1050/Shiner) (JIRA:AlmaLinux-14195)
* Latency spikes with Matrox G200 graphic cards (JIRA:AlmaLinux-36172)

For more details about the security issue(s), including the impact, 
            a CVSS score, acknowledgments, and other related information, refer to the CVE page(s)
            listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4211" id="RHSA-2024:4211" type="rhsa" title="RHSA-2024:4211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-26555" id="CVE-2020-26555" type="cve" title="CVE-2020-26555"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46909" id="CVE-2021-46909" type="cve" title="CVE-2021-46909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46972" id="CVE-2021-46972" type="cve" title="CVE-2021-46972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47069" id="CVE-2021-47069" type="cve" title="CVE-2021-47069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47073" id="CVE-2021-47073" type="cve" title="CVE-2021-47073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47236" id="CVE-2021-47236" type="cve" title="CVE-2021-47236"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47310" id="CVE-2021-47310" type="cve" title="CVE-2021-47310"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47311" id="CVE-2021-47311" type="cve" title="CVE-2021-47311"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47353" id="CVE-2021-47353" type="cve" title="CVE-2021-47353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47356" id="CVE-2021-47356" type="cve" title="CVE-2021-47356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47456" id="CVE-2021-47456" type="cve" title="CVE-2021-47456"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47495" id="CVE-2021-47495" type="cve" title="CVE-2021-47495"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5090" id="CVE-2023-5090" type="cve" title="CVE-2023-5090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52464" id="CVE-2023-52464" type="cve" title="CVE-2023-52464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52560" id="CVE-2023-52560" type="cve" title="CVE-2023-52560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52615" id="CVE-2023-52615" type="cve" title="CVE-2023-52615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52626" id="CVE-2023-52626" type="cve" title="CVE-2023-52626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52667" id="CVE-2023-52667" type="cve" title="CVE-2023-52667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52669" id="CVE-2023-52669" type="cve" title="CVE-2023-52669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52675" id="CVE-2023-52675" type="cve" title="CVE-2023-52675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52686" id="CVE-2023-52686" type="cve" title="CVE-2023-52686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52700" id="CVE-2023-52700" type="cve" title="CVE-2023-52700"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52703" id="CVE-2023-52703" type="cve" title="CVE-2023-52703"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52781" id="CVE-2023-52781" type="cve" title="CVE-2023-52781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52813" id="CVE-2023-52813" type="cve" title="CVE-2023-52813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52835" id="CVE-2023-52835" type="cve" title="CVE-2023-52835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52877" id="CVE-2023-52877" type="cve" title="CVE-2023-52877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52878" id="CVE-2023-52878" type="cve" title="CVE-2023-52878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52881" id="CVE-2023-52881" type="cve" title="CVE-2023-52881"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26583" id="CVE-2024-26583" type="cve" title="CVE-2024-26583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26584" id="CVE-2024-26584" type="cve" title="CVE-2024-26584"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26585" id="CVE-2024-26585" type="cve" title="CVE-2024-26585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26656" id="CVE-2024-26656" type="cve" title="CVE-2024-26656"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26675" id="CVE-2024-26675" type="cve" title="CVE-2024-26675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26735" id="CVE-2024-26735" type="cve" title="CVE-2024-26735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26759" id="CVE-2024-26759" type="cve" title="CVE-2024-26759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26801" id="CVE-2024-26801" type="cve" title="CVE-2024-26801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26804" id="CVE-2024-26804" type="cve" title="CVE-2024-26804"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26826" id="CVE-2024-26826" type="cve" title="CVE-2024-26826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26859" id="CVE-2024-26859" type="cve" title="CVE-2024-26859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26906" id="CVE-2024-26906" type="cve" title="CVE-2024-26906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26907" id="CVE-2024-26907" type="cve" title="CVE-2024-26907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26974" id="CVE-2024-26974" type="cve" title="CVE-2024-26974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26982" id="CVE-2024-26982" type="cve" title="CVE-2024-26982"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27397" id="CVE-2024-27397" type="cve" title="CVE-2024-27397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27410" id="CVE-2024-27410" type="cve" title="CVE-2024-27410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35789" id="CVE-2024-35789" type="cve" title="CVE-2024-35789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35835" id="CVE-2024-35835" type="cve" title="CVE-2024-35835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35838" id="CVE-2024-35838" type="cve" title="CVE-2024-35838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35845" id="CVE-2024-35845" type="cve" title="CVE-2024-35845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35852" id="CVE-2024-35852" type="cve" title="CVE-2024-35852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35853" id="CVE-2024-35853" type="cve" title="CVE-2024-35853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35854" id="CVE-2024-35854" type="cve" title="CVE-2024-35854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35855" id="CVE-2024-35855" type="cve" title="CVE-2024-35855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35888" id="CVE-2024-35888" type="cve" title="CVE-2024-35888"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35890" id="CVE-2024-35890" type="cve" title="CVE-2024-35890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35958" id="CVE-2024-35958" type="cve" title="CVE-2024-35958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35959" id="CVE-2024-35959" type="cve" title="CVE-2024-35959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35960" id="CVE-2024-35960" type="cve" title="CVE-2024-35960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36004" id="CVE-2024-36004" type="cve" title="CVE-2024-36004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36007" id="CVE-2024-36007" type="cve" title="CVE-2024-36007"/>
      <reference href="https://bugzilla.redhat.com/1918601" id="1918601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248122" id="2248122" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258875" id="2258875" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265517" id="2265517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265519" id="2265519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265520" id="2265520" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265800" id="2265800" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266408" id="2266408" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266831" id="2266831" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267513" id="2267513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267518" id="2267518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267730" id="2267730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270093" id="2270093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271680" id="2271680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272692" id="2272692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272829" id="2272829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273204" id="2273204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273278" id="2273278" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273423" id="2273423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273429" id="2273429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275604" id="2275604" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275633" id="2275633" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275635" id="2275635" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275733" id="2275733" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278337" id="2278337" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278354" id="2278354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280434" id="2280434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281057" id="2281057" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281113" id="2281113" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281157" id="2281157" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281165" id="2281165" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281251" id="2281251" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281253" id="2281253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281255" id="2281255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281257" id="2281257" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281272" id="2281272" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281311" id="2281311" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281334" id="2281334" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281346" id="2281346" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281350" id="2281350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281689" id="2281689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281693" id="2281693" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281920" id="2281920" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281923" id="2281923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281925" id="2281925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281953" id="2281953" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281986" id="2281986" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282394" id="2282394" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282400" id="2282400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282471" id="2282471" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282472" id="2282472" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282581" id="2282581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282609" id="2282609" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282612" id="2282612" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282653" id="2282653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282680" id="2282680" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282698" id="2282698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282712" id="2282712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282735" id="2282735" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282902" id="2282902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282920" id="2282920" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4211.html" id="ALSA-2024:4211" type="self" title="ALSA-2024:4211"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.8.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.8.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.8.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">796fa9a80ba5c66dbff6b50d65b3fb15386eb2dd9d9c0f855c1ea2793a0accb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4227</id>
    <title>Moderate: python-pillow security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:21:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: buffer overflow in _imagingcms.c (CVE-2024-28219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4227" id="RHSA-2024:4227" type="rhsa" title="RHSA-2024:4227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28219" id="CVE-2024-28219" type="cve" title="CVE-2024-28219"/>
      <reference href="https://bugzilla.redhat.com/2272563" id="2272563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4227.html" id="ALSA-2024:4227" type="self" title="ALSA-2024:4227"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3-pillow-doc" version="5.1.1" release="21.el8_10" epoch="0" arch="noarch" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-doc-5.1.1-21.el8_10.noarch.rpm</filename>
          <sum type="sha256">134e93c0c1fbe05ce479cb1da6eb2cc51105f38670cf89d252ba588cbaa95bcf</sum>
        </package>
        <package name="python3-pillow-tk" version="5.1.1" release="21.el8_10" epoch="0" arch="aarch64" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-tk-5.1.1-21.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b9cfd0859eb75c2ed86bf36fb268c40bbc74c92e9433f532fe3eaa94ec3348ed</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="21.el8_10" epoch="0" arch="aarch64" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-devel-5.1.1-21.el8_10.aarch64.rpm</filename>
          <sum type="sha256">cf22334313f6db67b95c9edd02d388dcb6c646659e3f0dac94e45f8173efac2c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4243</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:15:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4243" id="RHSA-2024:4243" type="rhsa" title="RHSA-2024:4243"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4243.html" id="ALSA-2024:4243" type="self" title="ALSA-2024:4243"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.3" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.3-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0335dab80bd8703a9ca421c2a24f9fb153a7280f7d5e29bc95e7f6a9579424c3</sum>
        </package>
        <package name="python3.12-debug" version="3.12.3" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.3-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">43df8e0b2c13e8228de66917d159314ba94eb4417118853cace26465d80899a1</sum>
        </package>
        <package name="python3.12-idle" version="3.12.3" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.3-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">66f8dca9b48475637fe17edd0f35f5678f5ee578667f646749f14725e9aa4aa3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4247</id>
    <title>Moderate: libuv security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:49:49"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libuv security update</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4247" id="RHSA-2024:4247" type="rhsa" title="RHSA-2024:4247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806"/>
      <reference href="https://bugzilla.redhat.com/2263292" id="2263292" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4247.html" id="ALSA-2024:4247" type="self" title="ALSA-2024:4247"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libuv-devel" version="1.41.1" release="2.el8_10" epoch="1" arch="aarch64" src="libuv-1.41.1-2.el8_10.src.rpm">
          <filename>libuv-devel-1.41.1-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">21d2d18c4c8670204d589b5f8898078575394a0bf5c84950cb5243dc7be22fa0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4252</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:45:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4252" id="RHSA-2024:4252" type="rhsa" title="RHSA-2024:4252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4252.html" id="ALSA-2024:4252" type="self" title="ALSA-2024:4252"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="nghttp2" version="1.33.0" release="6.el8_10.1" epoch="0" arch="aarch64" src="nghttp2-1.33.0-6.el8_10.1.src.rpm">
          <filename>nghttp2-1.33.0-6.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">79368bd2997f5c266d8b1804c847cc13948ae68db2cb86ac57a83f6880d15aad</sum>
        </package>
        <package name="libnghttp2-devel" version="1.33.0" release="6.el8_10.1" epoch="0" arch="aarch64" src="nghttp2-1.33.0-6.el8_10.1.src.rpm">
          <filename>libnghttp2-devel-1.33.0-6.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">81f0d1acf7006ee1049125535d15d9a7792b113fbafd357f78d116c0f17af7f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4259</id>
    <title>Moderate: xmlrpc-c security and bug fix update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:16:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security and bug fix update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4259" id="RHSA-2024:4259" type="rhsa" title="RHSA-2024:4259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52425" id="CVE-2023-52425" type="cve" title="CVE-2023-52425"/>
      <reference href="https://bugzilla.redhat.com/2262877" id="2262877" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4259.html" id="ALSA-2024:4259" type="self" title="ALSA-2024:4259"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xmlrpc-c-c++" version="1.51.0" release="9.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-9.el8_10.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-9.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2318c533e173b3670b7cad1ceca4ac0b180c8e8d1ed777e33fc5120977ebb348</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="9.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-9.el8_10.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-9.el8_10.aarch64.rpm</filename>
          <sum type="sha256">7349a7e537e2afa9c1f312dd8ce609fb53455008ddc12fe39fca5bc7d9520f26</sum>
        </package>
        <package name="xmlrpc-c-devel" version="1.51.0" release="9.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-9.el8_10.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-9.el8_10.aarch64.rpm</filename>
          <sum type="sha256">899e68c496e8350edcc0b54d7c077c025d592329795818537740079d56a7bf66</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4264</id>
    <title>Low: openldap security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:33:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openldap security update</summary>
    <description>OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. 

Security Fix(es):

* openldap: null pointer dereference in  ber_memalloc_x  function (CVE-2023-2953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4264" id="RHSA-2024:4264" type="rhsa" title="RHSA-2024:4264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2953" id="CVE-2023-2953" type="cve" title="CVE-2023-2953"/>
      <reference href="https://bugzilla.redhat.com/2210651" id="2210651" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4264.html" id="ALSA-2024:4264" type="self" title="ALSA-2024:4264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="openldap-servers" version="2.4.46" release="19.el8_10" epoch="0" arch="aarch64" src="openldap-2.4.46-19.el8_10.src.rpm">
          <filename>openldap-servers-2.4.46-19.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4d18167417f6881072ce19a9de5b377eba51ade48906f635e650e551e8da3968</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4267</id>
    <title>Moderate: fontforge security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:14:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. 

Security Fix(es):

* fontforge: command injection via crafted filenames (CVE-2024-25081)
* fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4267" id="RHSA-2024:4267" type="rhsa" title="RHSA-2024:4267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25081" id="CVE-2024-25081" type="cve" title="CVE-2024-25081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25082" id="CVE-2024-25082" type="cve" title="CVE-2024-25082"/>
      <reference href="https://bugzilla.redhat.com/2266180" id="2266180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266181" id="2266181" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4267.html" id="ALSA-2024:4267" type="self" title="ALSA-2024:4267"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="fontforge" version="20200314" release="6.el8_10" epoch="0" arch="aarch64" src="fontforge-20200314-6.el8_10.src.rpm">
          <filename>fontforge-20200314-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">bd5fad21bc07c60bc2c955a17524165b4fcaec9d34a018d3aa78a9c60e9cccbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4351</id>
    <title>Low: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-08 11:17:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix:

* virt:rhel/libvirt: stack use-after-free in virNetClientIOEventLoop (CVE-2024-4418) 

Bug fix:

* virsh destroy with --graceful destroyed a paused guest (qemu process paused by SIGSTOP) (JIRA:AlmaLinux-36064)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4351" id="RHSA-2024:4351" type="rhsa" title="RHSA-2024:4351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4418" id="CVE-2024-4418" type="cve" title="CVE-2024-4418"/>
      <reference href="https://bugzilla.redhat.com/2278616" id="2278616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4351.html" id="ALSA-2024:4351" type="self" title="ALSA-2024:4351"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240523065118" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-49.module_el8.10.0+3839+c94ce74b.aarch64.rpm</filename>
          <sum type="sha256">e4b1b00ddcd1d4909c446c24be20b173634ad959c336402c655925713c170676</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4420</id>
    <title>Important: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 13:17:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4420" id="RHSA-2024:4420" type="rhsa" title="RHSA-2024:4420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4467" id="CVE-2024-4467" type="cve" title="CVE-2024-4467"/>
      <reference href="https://bugzilla.redhat.com/2278875" id="2278875" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4420.html" id="ALSA-2024:4420" type="self" title="ALSA-2024:4420"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240710081321" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">bf3790557c14245a63b0556f2fe05cdea32f37cd76237d1472efb5577e602163</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">cf3e50e1d9999a0716ca516c897f27106c3213868c13cb07b40005f88b825dfd</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-50.module_el8.10.0+3869+b8959270.aarch64.rpm</filename>
          <sum type="sha256">f2fec27696823d50c833bf2f31e18a41e9a556cb2db93fc55ec37aa5b8bdcae2</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4438</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 09:06:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4438" id="RHSA-2024:4438" type="rhsa" title="RHSA-2024:4438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4438.html" id="ALSA-2024:4438" type="self" title="ALSA-2024:4438"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.132" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.132-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ed1f22ab0e9c7fc6ad7d41cb29ae1b00e12441e0ccc5f5f4a8d53fe95e065ea2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4451</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:43:53"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4451" id="RHSA-2024:4451" type="rhsa" title="RHSA-2024:4451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4451.html" id="ALSA-2024:4451" type="self" title="ALSA-2024:4451"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.107" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.107-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">24d324fe03ec324a2b85c07d44dd02170ea7cb3baa33eb73a6953a862c7ea147</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4563</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 15:14:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4563" id="RHSA-2024:4563" type="rhsa" title="RHSA-2024:4563"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4563.html" id="ALSA-2024:4563" type="self" title="ALSA-2024:4563"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0f8e24aeddf7f82a0a127428115f2721c5d37216cbc6313d5a53657c755c8324</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1240c4273c7021e96df9fdca866dfd8a78c4465e2e252e125556044f22e8421f</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">22745586ecf44e4f475a5b5a7fce87136d2a6de3080aa23fa546e6f17f7773ac</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">24504e32988021d9a3389915d68d52ff55a39e6573ee01441d78ab3048067a55</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6ae819bf34c93df2dd9e1836b244e80ea0cedea029850e8c68d199ec75c0acb1</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">728c865cf5248bbf5e7a516b0901c6d59ce7819ac6b2d961e5f3aa1a260ae78b</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ac9879d19a4976e3b324bf6929ae3ed42ee40215c3431fa4101591db3f07c0f9</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ad58abdb8e3f04c60e6d6a13004ede7ddc5df0200c5ed6c5e66d0016b49d330d</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cf5b1c2f6f06946e1bc33204a416e053bd51a049faac6e680562e97ddbd1f277</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d51350c3582d9874dc4b852fa0d3818c4880fa73be3ea0917becf62dfe4f59de</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f654100d19e5001fbb3c32249c8a19ca73b1ce8251d40b2ffeab4ef4c4c4c5e6</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.422.b05" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.422.b05-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.422.b05-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f74b9db5c0a1a21e1400e1f934c264da9eb53a20abb5aec701f327c066acfb60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4567</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-07-16 00:00:00"/>
    <updated date="2024-07-26 15:17:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4567" id="RHSA-2024:4567" type="rhsa" title="RHSA-2024:4567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4567.html" id="ALSA-2024:4567" type="self" title="ALSA-2024:4567"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">0071208e6e99969b29fc312991876af92120385db0b0eaaedf4fbea0a4479c7f</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">088af503b7ab0bab2e0544c2422a3a686fafcbe1efa288af805a44498ea7f4d9</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">29c85de7e98ffbe8b9eb5fa92f5bf970c9f1fb79c01f931017479a440229a217</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">2eec4705d91bccde397ea895a431ccb4343f60ca88ff962618b5674d6d3cc696</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">47e61257726c19c89d6c9474e62a88736ea6f48f5fd4aaedd69da84addbfb65f</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">5357dec9c9e19ec23f76cc99ea583089fca685fdc9c6a6aeea155c1808e9d3e7</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">6a6591c4143c4f77e1ced8897cc6645c2cd1c39c161072c73c6ecbc5940b1066</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">91817974d3cbb816f67572cf17d363b16e359a1786beffa6df60e1599f3ff472</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">935c1960153fd550692be0e19aa4de0a3d1f4c343262168f1724eef33bf27e2f</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">db523cf02dc97f978002c8a7fbe50544a27b228af2cea6e634c7472866991efa</sum>
        </package>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">def79eb1d5234777559c41d44b6ccc6d6ebab55f75b775334b2513f3525303e4</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e1cf8e3c9e480ffd48f51a0c6d707d31f332c31690d88765a4e644cc08ded3fc</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e2b45572793b532e6e610793e97461e724a9fe37c7abba7dafe0b09cb90226ee</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.24.0.8-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f92a891e29654ac6766eaa061fcc50ee13ccd52e93093e1b06615b6e4ff1bcba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4568</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:15:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4568" id="RHSA-2024:4568" type="rhsa" title="RHSA-2024:4568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4568.html" id="ALSA-2024:4568" type="self" title="ALSA-2024:4568"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0a9a8702cc5c4880e386b848d4759a42a8d2e5d7e732b453aff28144b73fa8da</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0ca46fca79026b9de6e97eb654354c6f31a1a1aaef25434ab47afc6f15e24a4a</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3363eaf5a9250fd8325e4b5867a25471551cdaca8fe96256b08a1667fb8160a1</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">39cd7da328fbe7c19a72988c6680a633ec418bf5875f9e4e4374d0fad4025e32</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3caf16fa3a85ca179aa18f2f559c98d1bbcf54c43f86a382f973c1967d65373e</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4a553ba5b7b466c6c90fac3507907d866c09c3719469d223ced7ff4d7131066d</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">541f0f9f22a99bd2ea5300135070e39882614bd8b8c0b909be2713964e5fc855</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5dc9421d0dae14230ce4e1b186865ce6ba6f49374d7f025c3cdfbe6a7ab2f4c7</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ad28d12f5d7a343bf1ca07589d056d2e9d5831970a02f0de0ffd44a64c47c565</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c8935b96fa31e974c7077f99efb7600391e95e57cd5ba0cd5b582cb7d15a60c2</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d0ee2a96e8a0da95af35907e00a1792b3ee6810eebfad8e106e61226bdba1964</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d963c1a68a66ebe96f98f90b171e8647e624a473cb4e8ec95b0eadbb35abfce8</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e2219667e71ffc42c1cf7e6027541ee0914ebcd3032d62a489828ca76d12280c</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.12.0.7-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e933d354e18caf472c2132ab5daf6d79ea86754d9ead3586672f4ac54542087d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:18:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4573" id="RHSA-2024:4573" type="rhsa" title="RHSA-2024:4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4573.html" id="ALSA-2024:4573" type="self" title="ALSA-2024:4573"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">0550e1f83b1630cbedb9eeaffda89fda00b9b95a02ca2d574a24101d57e62be2</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">180c38a5ea9c148f1f558db703160caee4f146c002ef9bf527a3e8117602f449</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">34f1814032bc1f0006f4b4ec923e9c7fc29558341f1117392866b02b5ad40152</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">53d45200216b382d2e2c55dba3d93f587e7643e005cf3f65cafc9cd7b9618ff2</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">853e0a50d2d3e47cfeb9642e739d9122cf0eddccae223f8080b0633ab0aa18f7</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">88eb4c4e0b483aed00357e98b63ef06e08a572b52a86778b75a1c3b706540c3a</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9488ff9f96a362b2e6634f4a80fcf10158a63ea9de0834ef981d982e05abad93</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">9803044da85321fd1f833ae5f2d95b1009774ad8558e620ac214332dd9537af8</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b74b90b1cd7ec445cdb137ef80f003a00915ff6293cb53f16c9cb9f4bc6c7923</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">dda419bc214886682f04be2fc8fb13a7447dc3c67b08e7e52c629c30895338ec</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ebfac585e0dd8de8db4279f7b23c0d1adf07dc17819bdb6e01e2977d30bec2f8</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">fdd736bf9e1b163571f3489e9bb3e2b13015f0d5dd06761c41fd4a66a7d8ed3b</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ff135b09e7d02b99e3b8c8c11a675497f4c4f956e32cf90f49a9be0d5c2d5f6a</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.4.0.7-1.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">ffab5b5657ddb294bff153695d256ca5781fea0dc4222acda2ecb0e4fa040e96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4617</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:26:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4617" id="RHSA-2024:4617" type="rhsa" title="RHSA-2024:4617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936"/>
      <reference href="https://bugzilla.redhat.com/2295867" id="2295867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4617.html" id="ALSA-2024:4617" type="self" title="ALSA-2024:4617"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="qt5-qtbase-static" version="5.15.3" release="8.el8_10" epoch="0" arch="aarch64" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-8.el8_10.aarch64.rpm</filename>
          <sum type="sha256">eee55dc9d034ed8652eb144cdb98ac413062acce5a6f639f1632c1f3a2d20b20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5079</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-08-07 00:00:00"/>
    <updated date="2024-08-08 08:54:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)
* libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)
* libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5079" id="RHSA-2024:5079" type="rhsa" title="RHSA-2024:5079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-15209" id="CVE-2018-15209" type="cve" title="CVE-2018-15209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25433" id="CVE-2023-25433" type="cve" title="CVE-2023-25433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52356" id="CVE-2023-52356" type="cve" title="CVE-2023-52356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6228" id="CVE-2023-6228" type="cve" title="CVE-2023-6228"/>
      <reference href="https://bugzilla.redhat.com/1614051" id="1614051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218744" id="2218744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240995" id="2240995" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2251344" id="2251344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5079.html" id="ALSA-2024:5079" type="self" title="ALSA-2024:5079"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="32.el8_10" epoch="0" arch="aarch64" src="libtiff-4.0.9-32.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-32.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c695837399047fcb79ec764f898b0f30baa5a1302857b85021d03ab5f1fce3ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5101</id>
    <title>Important: kernel security update</title>
    <issued date="2024-08-08 00:00:00"/>
    <updated date="2024-08-08 19:02:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451)
* kernel: efivarfs: force RO when remounting if SetVariable is not supported (CVE-2023-52463)
* kernel: tracing: Restructure trace_clock_global() to never block (CVE-2021-46939)
* kernel: ext4: avoid online resizing failures due to oversized flex bg (CVE-2023-52622)
* kernel: net/sched: flower: Fix chain template offload (CVE-2024-26669)
* kernel: stmmac: Clear variable when destroying workqueue (CVE-2024-26802)
* kernel: efi: runtime: Fix potential overflow of soft-reserved region size (CVE-2024-26843)
* kernel: quota: Fix potential NULL pointer dereference (CVE-2024-26878)
* kernel: TIPC message reassembly use-after-free remote code execution vulnerability (CVE-2024-36886)
* kernel: SUNRPC: fix a memleak in gss_import_v2_context (CVE-2023-52653)
* kernel: dmaengine/idxd: hardware erratum allows potential security problem with direct access by untrusted application (CVE-2024-21823)
* kernel: Revert &amp;#34;net/mlx5: Block entering switchdev mode with ns inconsistency&amp;#34; (CVE-2023-52658)
* kernel: ext4: fix corruption during on-line resize (CVE-2024-35807)
* kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (CVE-2024-35801)
* kernel: dyndbg: fix old BUG_ON in &amp;gt;control parser (CVE-2024-35947)
* kernel: net/sched: act_skbmod: prevent kernel-infoleak (CVE-2024-35893)
* kernel: x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (CVE-2024-35876)
* kernel: platform/x86: wmi: Fix opening of char device (CVE-2023-52864)
* kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (CVE-2023-52845)
* (CVE-2023-28746)
* (CVE-2023-52847)
* (CVE-2021-47548)
* (CVE-2024-36921)
* (CVE-2024-26921)
* (CVE-2021-47579)
* (CVE-2024-36927)
* (CVE-2024-39276)
* (CVE-2024-33621)
* (CVE-2024-27010)
* (CVE-2024-26960)
* (CVE-2024-38596)
* (CVE-2022-48743)
* (CVE-2024-26733)
* (CVE-2024-26586)
* (CVE-2024-26698)
* (CVE-2023-52619)

Bug Fix(es):

* AlmaLinux8.6 - Spinlock statistics may show negative elapsed time and incorrectly formatted output (JIRA:AlmaLinux-17678)
* [AWS][8.9]There are call traces found when booting debug-kernel  for Amazon EC2 r8g.metal-24xl instance (JIRA:AlmaLinux-23841)
* [almalinux8] gfs2: Fix glock shrinker (JIRA:AlmaLinux-32941)
* lan78xx: Microchip LAN7800 never comes up after unplug and replug (JIRA:AlmaLinux-33437)
* [Hyper-V][AlmaLinux-8.10.z] Update hv_netvsc driver to TOT (JIRA:AlmaLinux-39074)
* Use-after-free on proc inode-i_sb triggered by fsnotify (JIRA:AlmaLinux-40167)
* blk-cgroup: Properly propagate the iostat update up the hierarchy [almalinux-8.10.z] (JIRA:AlmaLinux-40939)
* (JIRA:AlmaLinux-31798)
* (JIRA:AlmaLinux-10263)
* (JIRA:AlmaLinux-40901)
* (JIRA:AlmaLinux-43547)
* (JIRA:AlmaLinux-34876)

Enhancement(s):

* [RFE] Add module parameters 'soft_reboot_cmd' and 'soft_active_on_boot' for customizing softdog configuration (JIRA:AlmaLinux-19723)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5101" id="RHSA-2024:5101" type="rhsa" title="RHSA-2024:5101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46939" id="CVE-2021-46939" type="cve" title="CVE-2021-46939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47018" id="CVE-2021-47018" type="cve" title="CVE-2021-47018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47257" id="CVE-2021-47257" type="cve" title="CVE-2021-47257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47284" id="CVE-2021-47284" type="cve" title="CVE-2021-47284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47304" id="CVE-2021-47304" type="cve" title="CVE-2021-47304"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47373" id="CVE-2021-47373" type="cve" title="CVE-2021-47373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47408" id="CVE-2021-47408" type="cve" title="CVE-2021-47408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47461" id="CVE-2021-47461" type="cve" title="CVE-2021-47461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47468" id="CVE-2021-47468" type="cve" title="CVE-2021-47468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47491" id="CVE-2021-47491" type="cve" title="CVE-2021-47491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47548" id="CVE-2021-47548" type="cve" title="CVE-2021-47548"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47579" id="CVE-2021-47579" type="cve" title="CVE-2021-47579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47624" id="CVE-2021-47624" type="cve" title="CVE-2021-47624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48632" id="CVE-2022-48632" type="cve" title="CVE-2022-48632"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48743" id="CVE-2022-48743" type="cve" title="CVE-2022-48743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48747" id="CVE-2022-48747" type="cve" title="CVE-2022-48747"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48757" id="CVE-2022-48757" type="cve" title="CVE-2022-48757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28746" id="CVE-2023-28746" type="cve" title="CVE-2023-28746"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52451" id="CVE-2023-52451" type="cve" title="CVE-2023-52451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52463" id="CVE-2023-52463" type="cve" title="CVE-2023-52463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52469" id="CVE-2023-52469" type="cve" title="CVE-2023-52469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52471" id="CVE-2023-52471" type="cve" title="CVE-2023-52471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52486" id="CVE-2023-52486" type="cve" title="CVE-2023-52486"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52530" id="CVE-2023-52530" type="cve" title="CVE-2023-52530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52619" id="CVE-2023-52619" type="cve" title="CVE-2023-52619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52622" id="CVE-2023-52622" type="cve" title="CVE-2023-52622"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52623" id="CVE-2023-52623" type="cve" title="CVE-2023-52623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52648" id="CVE-2023-52648" type="cve" title="CVE-2023-52648"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52653" id="CVE-2023-52653" type="cve" title="CVE-2023-52653"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52658" id="CVE-2023-52658" type="cve" title="CVE-2023-52658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52662" id="CVE-2023-52662" type="cve" title="CVE-2023-52662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52679" id="CVE-2023-52679" type="cve" title="CVE-2023-52679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52707" id="CVE-2023-52707" type="cve" title="CVE-2023-52707"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52730" id="CVE-2023-52730" type="cve" title="CVE-2023-52730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52756" id="CVE-2023-52756" type="cve" title="CVE-2023-52756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52762" id="CVE-2023-52762" type="cve" title="CVE-2023-52762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52764" id="CVE-2023-52764" type="cve" title="CVE-2023-52764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52775" id="CVE-2023-52775" type="cve" title="CVE-2023-52775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52777" id="CVE-2023-52777" type="cve" title="CVE-2023-52777"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52784" id="CVE-2023-52784" type="cve" title="CVE-2023-52784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52791" id="CVE-2023-52791" type="cve" title="CVE-2023-52791"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52796" id="CVE-2023-52796" type="cve" title="CVE-2023-52796"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52803" id="CVE-2023-52803" type="cve" title="CVE-2023-52803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52811" id="CVE-2023-52811" type="cve" title="CVE-2023-52811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52832" id="CVE-2023-52832" type="cve" title="CVE-2023-52832"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52834" id="CVE-2023-52834" type="cve" title="CVE-2023-52834"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52845" id="CVE-2023-52845" type="cve" title="CVE-2023-52845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52847" id="CVE-2023-52847" type="cve" title="CVE-2023-52847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52864" id="CVE-2023-52864" type="cve" title="CVE-2023-52864"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21823" id="CVE-2024-21823" type="cve" title="CVE-2024-21823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2201" id="CVE-2024-2201" type="cve" title="CVE-2024-2201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25739" id="CVE-2024-25739" type="cve" title="CVE-2024-25739"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26586" id="CVE-2024-26586" type="cve" title="CVE-2024-26586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26614" id="CVE-2024-26614" type="cve" title="CVE-2024-26614"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26640" id="CVE-2024-26640" type="cve" title="CVE-2024-26640"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26660" id="CVE-2024-26660" type="cve" title="CVE-2024-26660"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26669" id="CVE-2024-26669" type="cve" title="CVE-2024-26669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26686" id="CVE-2024-26686" type="cve" title="CVE-2024-26686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26698" id="CVE-2024-26698" type="cve" title="CVE-2024-26698"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26704" id="CVE-2024-26704" type="cve" title="CVE-2024-26704"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26733" id="CVE-2024-26733" type="cve" title="CVE-2024-26733"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26740" id="CVE-2024-26740" type="cve" title="CVE-2024-26740"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26772" id="CVE-2024-26772" type="cve" title="CVE-2024-26772"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26773" id="CVE-2024-26773" type="cve" title="CVE-2024-26773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26802" id="CVE-2024-26802" type="cve" title="CVE-2024-26802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26810" id="CVE-2024-26810" type="cve" title="CVE-2024-26810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26837" id="CVE-2024-26837" type="cve" title="CVE-2024-26837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26840" id="CVE-2024-26840" type="cve" title="CVE-2024-26840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26843" id="CVE-2024-26843" type="cve" title="CVE-2024-26843"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26852" id="CVE-2024-26852" type="cve" title="CVE-2024-26852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26853" id="CVE-2024-26853" type="cve" title="CVE-2024-26853"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26870" id="CVE-2024-26870" type="cve" title="CVE-2024-26870"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26878" id="CVE-2024-26878" type="cve" title="CVE-2024-26878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26908" id="CVE-2024-26908" type="cve" title="CVE-2024-26908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26921" id="CVE-2024-26921" type="cve" title="CVE-2024-26921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26925" id="CVE-2024-26925" type="cve" title="CVE-2024-26925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26940" id="CVE-2024-26940" type="cve" title="CVE-2024-26940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26958" id="CVE-2024-26958" type="cve" title="CVE-2024-26958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26960" id="CVE-2024-26960" type="cve" title="CVE-2024-26960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26961" id="CVE-2024-26961" type="cve" title="CVE-2024-26961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27010" id="CVE-2024-27010" type="cve" title="CVE-2024-27010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27011" id="CVE-2024-27011" type="cve" title="CVE-2024-27011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27019" id="CVE-2024-27019" type="cve" title="CVE-2024-27019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27020" id="CVE-2024-27020" type="cve" title="CVE-2024-27020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27025" id="CVE-2024-27025" type="cve" title="CVE-2024-27025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27065" id="CVE-2024-27065" type="cve" title="CVE-2024-27065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27388" id="CVE-2024-27388" type="cve" title="CVE-2024-27388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27395" id="CVE-2024-27395" type="cve" title="CVE-2024-27395"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27434" id="CVE-2024-27434" type="cve" title="CVE-2024-27434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31076" id="CVE-2024-31076" type="cve" title="CVE-2024-31076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33621" id="CVE-2024-33621" type="cve" title="CVE-2024-33621"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35790" id="CVE-2024-35790" type="cve" title="CVE-2024-35790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35801" id="CVE-2024-35801" type="cve" title="CVE-2024-35801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35807" id="CVE-2024-35807" type="cve" title="CVE-2024-35807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35810" id="CVE-2024-35810" type="cve" title="CVE-2024-35810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35814" id="CVE-2024-35814" type="cve" title="CVE-2024-35814"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35823" id="CVE-2024-35823" type="cve" title="CVE-2024-35823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35824" id="CVE-2024-35824" type="cve" title="CVE-2024-35824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35847" id="CVE-2024-35847" type="cve" title="CVE-2024-35847"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35876" id="CVE-2024-35876" type="cve" title="CVE-2024-35876"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35893" id="CVE-2024-35893" type="cve" title="CVE-2024-35893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35896" id="CVE-2024-35896" type="cve" title="CVE-2024-35896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35897" id="CVE-2024-35897" type="cve" title="CVE-2024-35897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35899" id="CVE-2024-35899" type="cve" title="CVE-2024-35899"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35900" id="CVE-2024-35900" type="cve" title="CVE-2024-35900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35910" id="CVE-2024-35910" type="cve" title="CVE-2024-35910"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35912" id="CVE-2024-35912" type="cve" title="CVE-2024-35912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35924" id="CVE-2024-35924" type="cve" title="CVE-2024-35924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35925" id="CVE-2024-35925" type="cve" title="CVE-2024-35925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35930" id="CVE-2024-35930" type="cve" title="CVE-2024-35930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35937" id="CVE-2024-35937" type="cve" title="CVE-2024-35937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35938" id="CVE-2024-35938" type="cve" title="CVE-2024-35938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35946" id="CVE-2024-35946" type="cve" title="CVE-2024-35946"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35947" id="CVE-2024-35947" type="cve" title="CVE-2024-35947"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35952" id="CVE-2024-35952" type="cve" title="CVE-2024-35952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36000" id="CVE-2024-36000" type="cve" title="CVE-2024-36000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36005" id="CVE-2024-36005" type="cve" title="CVE-2024-36005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36006" id="CVE-2024-36006" type="cve" title="CVE-2024-36006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36010" id="CVE-2024-36010" type="cve" title="CVE-2024-36010"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36016" id="CVE-2024-36016" type="cve" title="CVE-2024-36016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36017" id="CVE-2024-36017" type="cve" title="CVE-2024-36017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36020" id="CVE-2024-36020" type="cve" title="CVE-2024-36020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36025" id="CVE-2024-36025" type="cve" title="CVE-2024-36025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36270" id="CVE-2024-36270" type="cve" title="CVE-2024-36270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36286" id="CVE-2024-36286" type="cve" title="CVE-2024-36286"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36489" id="CVE-2024-36489" type="cve" title="CVE-2024-36489"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36886" id="CVE-2024-36886" type="cve" title="CVE-2024-36886"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36889" id="CVE-2024-36889" type="cve" title="CVE-2024-36889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36896" id="CVE-2024-36896" type="cve" title="CVE-2024-36896"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36904" id="CVE-2024-36904" type="cve" title="CVE-2024-36904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36905" id="CVE-2024-36905" type="cve" title="CVE-2024-36905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36917" id="CVE-2024-36917" type="cve" title="CVE-2024-36917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36921" id="CVE-2024-36921" type="cve" title="CVE-2024-36921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36927" id="CVE-2024-36927" type="cve" title="CVE-2024-36927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36929" id="CVE-2024-36929" type="cve" title="CVE-2024-36929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36933" id="CVE-2024-36933" type="cve" title="CVE-2024-36933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36940" id="CVE-2024-36940" type="cve" title="CVE-2024-36940"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36941" id="CVE-2024-36941" type="cve" title="CVE-2024-36941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36945" id="CVE-2024-36945" type="cve" title="CVE-2024-36945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36950" id="CVE-2024-36950" type="cve" title="CVE-2024-36950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36954" id="CVE-2024-36954" type="cve" title="CVE-2024-36954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36960" id="CVE-2024-36960" type="cve" title="CVE-2024-36960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36971" id="CVE-2024-36971" type="cve" title="CVE-2024-36971"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36978" id="CVE-2024-36978" type="cve" title="CVE-2024-36978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36979" id="CVE-2024-36979" type="cve" title="CVE-2024-36979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38538" id="CVE-2024-38538" type="cve" title="CVE-2024-38538"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38555" id="CVE-2024-38555" type="cve" title="CVE-2024-38555"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38573" id="CVE-2024-38573" type="cve" title="CVE-2024-38573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38575" id="CVE-2024-38575" type="cve" title="CVE-2024-38575"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38596" id="CVE-2024-38596" type="cve" title="CVE-2024-38596"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38598" id="CVE-2024-38598" type="cve" title="CVE-2024-38598"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38615" id="CVE-2024-38615" type="cve" title="CVE-2024-38615"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38627" id="CVE-2024-38627" type="cve" title="CVE-2024-38627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39276" id="CVE-2024-39276" type="cve" title="CVE-2024-39276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39472" id="CVE-2024-39472" type="cve" title="CVE-2024-39472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39476" id="CVE-2024-39476" type="cve" title="CVE-2024-39476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39487" id="CVE-2024-39487" type="cve" title="CVE-2024-39487"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39502" id="CVE-2024-39502" type="cve" title="CVE-2024-39502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40927" id="CVE-2024-40927" type="cve" title="CVE-2024-40927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40974" id="CVE-2024-40974" type="cve" title="CVE-2024-40974"/>
      <reference href="https://bugzilla.redhat.com/2263879" id="2263879" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265645" id="2265645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265650" id="2265650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265797" id="2265797" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266341" id="2266341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266347" id="2266347" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266497" id="2266497" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266594" id="2266594" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267787" id="2267787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268118" id="2268118" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269070" id="2269070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269211" id="2269211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270084" id="2270084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270100" id="2270100" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270700" id="2270700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271686" id="2271686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271688" id="2271688" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272782" id="2272782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272795" id="2272795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273109" id="2273109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273117" id="2273117" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273174" id="2273174" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273236" id="2273236" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273242" id="2273242" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273247" id="2273247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273268" id="2273268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273427" id="2273427" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273654" id="2273654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275565" id="2275565" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275573" id="2275573" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275580" id="2275580" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275694" id="2275694" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275711" id="2275711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275744" id="2275744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275748" id="2275748" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275761" id="2275761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275928" id="2275928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277166" id="2277166" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277238" id="2277238" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277840" id="2277840" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278176" id="2278176" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278178" id="2278178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278182" id="2278182" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278218" id="2278218" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278256" id="2278256" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278258" id="2278258" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278277" id="2278277" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278279" id="2278279" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278380" id="2278380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278484" id="2278484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278515" id="2278515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278535" id="2278535" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278539" id="2278539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278989" id="2278989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2280440" id="2280440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281054" id="2281054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281133" id="2281133" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281149" id="2281149" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281189" id="2281189" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281190" id="2281190" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281207" id="2281207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281215" id="2281215" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281221" id="2281221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281235" id="2281235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281268" id="2281268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281326" id="2281326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281360" id="2281360" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281510" id="2281510" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281519" id="2281519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281636" id="2281636" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281641" id="2281641" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281664" id="2281664" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281667" id="2281667" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281672" id="2281672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281675" id="2281675" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281682" id="2281682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281725" id="2281725" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281752" id="2281752" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281758" id="2281758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281819" id="2281819" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281821" id="2281821" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281833" id="2281833" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281938" id="2281938" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281949" id="2281949" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281968" id="2281968" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281989" id="2281989" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282328" id="2282328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282373" id="2282373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282479" id="2282479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282553" id="2282553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282615" id="2282615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282623" id="2282623" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282640" id="2282640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282642" id="2282642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282645" id="2282645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282690" id="2282690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282717" id="2282717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282719" id="2282719" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282727" id="2282727" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282742" id="2282742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282743" id="2282743" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282744" id="2282744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282759" id="2282759" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282763" id="2282763" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282766" id="2282766" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282772" id="2282772" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282780" id="2282780" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282887" id="2282887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282896" id="2282896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282923" id="2282923" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282925" id="2282925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282950" id="2282950" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283401" id="2283401" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283894" id="2283894" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284400" id="2284400" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284417" id="2284417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284421" id="2284421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284465" id="2284465" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284474" id="2284474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284477" id="2284477" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284488" id="2284488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284496" id="2284496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284500" id="2284500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284513" id="2284513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284519" id="2284519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284539" id="2284539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284541" id="2284541" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284556" id="2284556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284571" id="2284571" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284590" id="2284590" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284625" id="2284625" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2290408" id="2290408" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2292331" id="2292331" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293078" id="2293078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293250" id="2293250" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293276" id="2293276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293312" id="2293312" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293316" id="2293316" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293348" id="2293348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293367" id="2293367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293371" id="2293371" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293383" id="2293383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293418" id="2293418" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293420" id="2293420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293444" id="2293444" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293461" id="2293461" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293653" id="2293653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293657" id="2293657" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293684" id="2293684" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293687" id="2293687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293700" id="2293700" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293711" id="2293711" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294274" id="2294274" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295914" id="2295914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2296067" id="2296067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297056" id="2297056" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297474" id="2297474" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297511" id="2297511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297558" id="2297558" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298108" id="2298108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5101.html" id="ALSA-2024:5101" type="self" title="ALSA-2024:5101"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.16.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.16.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.16.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3ac1c7fc69961edf1a4bd4b639bfd5cc561928c577f2f4a5e4464e0fc3d5fa31</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5305</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:07:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5305" id="RHSA-2024:5305" type="rhsa" title="RHSA-2024:5305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6239" id="CVE-2024-6239" type="cve" title="CVE-2024-6239"/>
      <reference href="https://bugzilla.redhat.com/2293594" id="2293594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5305.html" id="ALSA-2024:5305" type="self" title="ALSA-2024:5305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="poppler-cpp-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">146dbcf4dfa5140d4bd6e7e2fdbccfc8a6d381f9fa7c7b092e93d3b3738af34e</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-devel-20.11.0-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3da6647a1fd7f9280b3fc9f54eee5f7e1d2959dc8b25ba680341ff415a34228f</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="12.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-cpp-20.11.0-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">57f9d104f4e0d305950e7db6819ccdc1c0e7d4af4ee0438f2814e1a0c243688c</sum>
        </package>
        <package name="poppler-glib-doc" version="20.11.0" release="12.el8_10" epoch="0" arch="noarch" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-glib-doc-20.11.0-12.el8_10.noarch.rpm</filename>
          <sum type="sha256">76d6c995554c5fe4b120b90e8fd0396bf9528427db98fd234e9dd85d94a57493</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">cf459213e78c16631867e365767bf0ed9772f761772551122cdb07b56fe631bd</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-glib-devel-20.11.0-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">df9fda78a562f8d915de3626c1da8336ff9e87c79efa959eb3ed921a00250e95</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5337</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:19:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5337" id="RHSA-2024:5337" type="rhsa" title="RHSA-2024:5337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5337.html" id="ALSA-2024:5337" type="self" title="ALSA-2024:5337"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.108" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.108-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">87907c846bf5e24bdf1269a615d30505a008a180fca2fe73745ebb959d077bc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5390</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-21 12:22:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5390" id="RHSA-2024:5390" type="rhsa" title="RHSA-2024:5390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298904" id="2298904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5390.html" id="ALSA-2024:5390" type="self" title="ALSA-2024:5390"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.noarch.rpm</filename>
          <sum type="sha256">6f81dab2b8aa02ad45c0863bd50276bbcc58728a9a77d3efb59011b1cb55fd67</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e56bbbfcdbdc97aae619848b381a963be3bbe6880ee7cf9052bf2e5d91c10576</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5531</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:36:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5531" id="RHSA-2024:5531" type="rhsa" title="RHSA-2024:5531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5531.html" id="ALSA-2024:5531" type="self" title="ALSA-2024:5531"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-4.el8_10.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">361f91dbf3ae4385b1dee922c6101a87c4baf4860b1af647ee3833e456723723</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5532</id>
    <title>Important: python3.11-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:38:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5532" id="RHSA-2024:5532" type="rhsa" title="RHSA-2024:5532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5532.html" id="ALSA-2024:5532" type="self" title="ALSA-2024:5532"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="3.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-3.el8_10.src.rpm">
          <filename>python3.11-setuptools-65.5.1-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">11eff0251416567b1e5647fd5168ab28590e64d3d020ec6896beb22208d2d3a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5941</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-29 08:25:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
* libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5941" id="RHSA-2024:5941" type="rhsa" title="RHSA-2024:5941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6349" id="CVE-2023-6349" type="cve" title="CVE-2023-6349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5197" id="CVE-2024-5197" type="cve" title="CVE-2024-5197"/>
      <reference href="https://bugzilla.redhat.com/2283553" id="2283553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291198" id="2291198" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5941.html" id="ALSA-2024:5941" type="self" title="ALSA-2024:5941"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libvpx-devel" version="1.7.0" release="11.el8_10" epoch="0" arch="aarch64" src="libvpx-1.7.0-11.el8_10.src.rpm">
          <filename>libvpx-devel-1.7.0-11.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c92c3caceacac0ad3eba128aeafe5a3c32ff7e417cbcdfa65156e6bf59e69b47</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5962</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-29 08:28:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5962" id="RHSA-2024:5962" type="rhsa" title="RHSA-2024:5962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5962.html" id="ALSA-2024:5962" type="self" title="ALSA-2024:5962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240828192834" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-debug" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="aarch64" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-debug-3.9.19-7.module_el8.10.0+3885+d986a391.aarch64.rpm</filename>
          <sum type="sha256">f69a782c79aa419bd7a9aed3f9903beef33da852d48777084d089e28e1d08ffe</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6422</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-09-05 00:00:00"/>
    <updated date="2024-09-06 07:42:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6422" id="RHSA-2024:6422" type="rhsa" title="RHSA-2024:6422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://bugzilla.redhat.com/2305202" id="2305202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6422.html" id="ALSA-2024:6422" type="self" title="ALSA-2024:6422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="flatpak-devel" version="1.12.9" release="3.el8_10" epoch="0" arch="aarch64" src="flatpak-1.12.9-3.el8_10.src.rpm">
          <filename>flatpak-devel-1.12.9-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">32b4e255b1f52e31347784689f91e71bd4a287aba32823fab92d9f9a38e1585d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6961</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 09:28:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  For the unversioned "python" executable, see manual page "unversioned-python".

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6961" id="RHSA-2024:6961" type="rhsa" title="RHSA-2024:6961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6961.html" id="ALSA-2024:6961" type="self" title="ALSA-2024:6961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-idle" version="3.12.5" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">676315901dba127d05c44b5d6790524eccddf28d5b410b3a44cea9a241057ef3</sum>
        </package>
        <package name="python3.12-debug" version="3.12.5" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">92664de6576a829629360d497840d8f1dfb198c48b5d85f6f5ab46dec9b94975</sum>
        </package>
        <package name="python3.12-test" version="3.12.5" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.5-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b17b0501d84641140516ffd9e399042eade091d2d212ec903c4f720578a134ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6962</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 09:21:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6962" id="RHSA-2024:6962" type="rhsa" title="RHSA-2024:6962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6962.html" id="ALSA-2024:6962" type="self" title="ALSA-2024:6962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.9" release="7.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0d311eb28092f657c7e941cdd83d518681bb3b17c5dbd615705235dffa799cf9</sum>
        </package>
        <package name="python3.11-test" version="3.11.9" release="7.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-test-3.11.9-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">109955758901f126227d7e7cfde5390a81c9d9af2fadc7e39759b71f71544bb6</sum>
        </package>
        <package name="python3.11-idle" version="3.11.9" release="7.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e336dcfb19e59768cf3367e98b47431cae82d1cbe376f387e4d44341172bcc5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6963</id>
    <title>Moderate: gtk3 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:32:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gtk3 security update</summary>
    <description>The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.

Security Fix(es):

* gtk3: gtk2: Library injection from CWD (CVE-2024-6655)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6963" id="RHSA-2024:6963" type="rhsa" title="RHSA-2024:6963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6655" id="CVE-2024-6655" type="cve" title="CVE-2024-6655"/>
      <reference href="https://bugzilla.redhat.com/2297098" id="2297098" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6963.html" id="ALSA-2024:6963" type="self" title="ALSA-2024:6963"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="gtk3-devel-docs" version="3.22.30" release="12.el8_10" epoch="0" arch="aarch64" src="gtk3-3.22.30-12.el8_10.src.rpm">
          <filename>gtk3-devel-docs-3.22.30-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3949dc47a5f24011c0336690cab7c22ab7403dc7e097535c8db5bbad5aea3e57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6964</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 14:46:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446)
* QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409)
* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6964" id="RHSA-2024:6964" type="rhsa" title="RHSA-2024:6964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3446" id="CVE-2024-3446" type="cve" title="CVE-2024-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7409" id="CVE-2024-7409" type="cve" title="CVE-2024-7409"/>
      <reference href="https://bugzilla.redhat.com/2274211" id="2274211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302487" id="2302487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302865" id="2302865" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6964.html" id="ALSA-2024:6964" type="self" title="ALSA-2024:6964"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="aarch64" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">07a8050c7528e71c17f620c328bcb89bc9c0a4a4791d6035465b202685f2242f</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-53.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">74173b745527e552ce910c2fe12dfb8ee9786503292a2adb6201f6836ce07d14</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="aarch64" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">bcc9f65eb02413e9a06d3b6d52f9abb1ca36a40f36146760fcf1e6e92033732f</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6973</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:30:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)
* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6973" id="RHSA-2024:6973" type="rhsa" title="RHSA-2024:6973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185"/>
      <reference href="https://bugzilla.redhat.com/2305909" id="2305909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305910" id="2305910" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6973.html" id="ALSA-2024:6973" type="self" title="ALSA-2024:6973"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dovecot-devel" version="2.3.16" release="6.el8_10" epoch="1" arch="aarch64" src="dovecot-2.3.16-6.el8_10.src.rpm">
          <filename>dovecot-devel-2.3.16-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e2a2b03e0c360f624ade1437314b23f795e6cd366edc83b2b3d8ebe5a3f23da6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7000</id>
    <title>Important: kernel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-25 15:23:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  
Security Fix(es):

 CVE-2023-6040  CVE-2024-26595  CVE-2024-26600  CVE-2021-46984  CVE-2023-52478  CVE-2023-52476  CVE-2023-52522  CVE-2021-47101  CVE-2021-47097  CVE-2023-52605  CVE-2024-26638  CVE-2024-26645  CVE-2024-26665  CVE-2024-26720  CVE-2024-26717  CVE-2024-26769  CVE-2024-26846  CVE-2024-26894  CVE-2024-26880  CVE-2024-26855  CVE-2024-26923  CVE-2024-26939  CVE-2024-27013  CVE-2024-27042  CVE-2024-35809  CVE-2023-52683  CVE-2024-35884  CVE-2024-35877  CVE-2024-35944  CVE-2024-35989  CVE-2021-47412  CVE-2021-47393  CVE-2021-47386  CVE-2021-47385  CVE-2021-47384  CVE-2021-47383  CVE-2021-47432  CVE-2021-47352  CVE-2021-47338  CVE-2021-47321  CVE-2021-47289  CVE-2021-47287  CVE-2023-52798  CVE-2023-52809  CVE-2023-52817  CVE-2023-52840  CVE-2023-52800  CVE-2021-47441  CVE-2021-47466  CVE-2021-47455  CVE-2021-47497  CVE-2021-47560  CVE-2021-47527  CVE-2024-36883  CVE-2024-36922  CVE-2024-36920  CVE-2024-36902  CVE-2024-36953  CVE-2024-36939  CVE-2024-36919  CVE-2024-36901  CVE-2021-47582  CVE-2021-47609  CVE-2024-38619  CVE-2022-48754  CVE-2022-48760  CVE-2024-38581  CVE-2024-38579  CVE-2024-38570  CVE-2024-38559  CVE-2024-38558  CVE-2024-37356  CVE-2024-39471  CVE-2024-39499  CVE-2024-39501  CVE-2024-39506  CVE-2024-40904  CVE-2024-40911  CVE-2024-40912  CVE-2024-40929  CVE-2024-40931  CVE-2024-40941  CVE-2024-40954  CVE-2024-40958  CVE-2024-40959  CVE-2024-40960  CVE-2024-40972  CVE-2024-40977  CVE-2024-40978  CVE-2024-40988  CVE-2024-40989  CVE-2024-40995  CVE-2024-40997  CVE-2024-40998  CVE-2024-41005  CVE-2024-40901  CVE-2024-41007  CVE-2024-41008  CVE-2022-48804  CVE-2022-48836  CVE-2022-48866  CVE-2024-41090  CVE-2024-41091  CVE-2024-41012  CVE-2024-41013  CVE-2024-41014  CVE-2024-41023  CVE-2024-41035  CVE-2024-41038  CVE-2024-41039  CVE-2024-41040  CVE-2024-41041  CVE-2024-41044  CVE-2024-41055  CVE-2024-41056  CVE-2024-41060  CVE-2024-41064  CVE-2024-41065  CVE-2024-41071  CVE-2024-41076  CVE-2024-41097  CVE-2024-42084  CVE-2024-42090  CVE-2024-42094  CVE-2024-42096  CVE-2024-42114  CVE-2024-42124  CVE-2024-42131  CVE-2024-42152  CVE-2024-42154  CVE-2024-42225  CVE-2024-42226  CVE-2024-42228  CVE-2024-42237  CVE-2024-42238  CVE-2024-42240  CVE-2024-42246  CVE-2024-42322  CVE-2024-43830  CVE-2024-43871  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7000" id="RHSA-2024:7000" type="rhsa" title="RHSA-2024:7000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46984" id="CVE-2021-46984" type="cve" title="CVE-2021-46984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47097" id="CVE-2021-47097" type="cve" title="CVE-2021-47097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47101" id="CVE-2021-47101" type="cve" title="CVE-2021-47101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47287" id="CVE-2021-47287" type="cve" title="CVE-2021-47287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47289" id="CVE-2021-47289" type="cve" title="CVE-2021-47289"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47321" id="CVE-2021-47321" type="cve" title="CVE-2021-47321"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47338" id="CVE-2021-47338" type="cve" title="CVE-2021-47338"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47352" id="CVE-2021-47352" type="cve" title="CVE-2021-47352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47383" id="CVE-2021-47383" type="cve" title="CVE-2021-47383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47384" id="CVE-2021-47384" type="cve" title="CVE-2021-47384"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47385" id="CVE-2021-47385" type="cve" title="CVE-2021-47385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47386" id="CVE-2021-47386" type="cve" title="CVE-2021-47386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47393" id="CVE-2021-47393" type="cve" title="CVE-2021-47393"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47412" id="CVE-2021-47412" type="cve" title="CVE-2021-47412"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47432" id="CVE-2021-47432" type="cve" title="CVE-2021-47432"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47441" id="CVE-2021-47441" type="cve" title="CVE-2021-47441"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47455" id="CVE-2021-47455" type="cve" title="CVE-2021-47455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47466" id="CVE-2021-47466" type="cve" title="CVE-2021-47466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47497" id="CVE-2021-47497" type="cve" title="CVE-2021-47497"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47527" id="CVE-2021-47527" type="cve" title="CVE-2021-47527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47560" id="CVE-2021-47560" type="cve" title="CVE-2021-47560"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47582" id="CVE-2021-47582" type="cve" title="CVE-2021-47582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47609" id="CVE-2021-47609" type="cve" title="CVE-2021-47609"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48619" id="CVE-2022-48619" type="cve" title="CVE-2022-48619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48754" id="CVE-2022-48754" type="cve" title="CVE-2022-48754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48760" id="CVE-2022-48760" type="cve" title="CVE-2022-48760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48804" id="CVE-2022-48804" type="cve" title="CVE-2022-48804"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48836" id="CVE-2022-48836" type="cve" title="CVE-2022-48836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48866" id="CVE-2022-48866" type="cve" title="CVE-2022-48866"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52470" id="CVE-2023-52470" type="cve" title="CVE-2023-52470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52476" id="CVE-2023-52476" type="cve" title="CVE-2023-52476"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52478" id="CVE-2023-52478" type="cve" title="CVE-2023-52478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52522" id="CVE-2023-52522" type="cve" title="CVE-2023-52522"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52605" id="CVE-2023-52605" type="cve" title="CVE-2023-52605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52683" id="CVE-2023-52683" type="cve" title="CVE-2023-52683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52798" id="CVE-2023-52798" type="cve" title="CVE-2023-52798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52800" id="CVE-2023-52800" type="cve" title="CVE-2023-52800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52809" id="CVE-2023-52809" type="cve" title="CVE-2023-52809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52817" id="CVE-2023-52817" type="cve" title="CVE-2023-52817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52840" id="CVE-2023-52840" type="cve" title="CVE-2023-52840"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6040" id="CVE-2023-6040" type="cve" title="CVE-2023-6040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23848" id="CVE-2024-23848" type="cve" title="CVE-2024-23848"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26595" id="CVE-2024-26595" type="cve" title="CVE-2024-26595"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26600" id="CVE-2024-26600" type="cve" title="CVE-2024-26600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26638" id="CVE-2024-26638" type="cve" title="CVE-2024-26638"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26645" id="CVE-2024-26645" type="cve" title="CVE-2024-26645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26649" id="CVE-2024-26649" type="cve" title="CVE-2024-26649"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26665" id="CVE-2024-26665" type="cve" title="CVE-2024-26665"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26717" id="CVE-2024-26717" type="cve" title="CVE-2024-26717"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26720" id="CVE-2024-26720" type="cve" title="CVE-2024-26720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26769" id="CVE-2024-26769" type="cve" title="CVE-2024-26769"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26846" id="CVE-2024-26846" type="cve" title="CVE-2024-26846"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26855" id="CVE-2024-26855" type="cve" title="CVE-2024-26855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26880" id="CVE-2024-26880" type="cve" title="CVE-2024-26880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26894" id="CVE-2024-26894" type="cve" title="CVE-2024-26894"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26923" id="CVE-2024-26923" type="cve" title="CVE-2024-26923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26939" id="CVE-2024-26939" type="cve" title="CVE-2024-26939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27013" id="CVE-2024-27013" type="cve" title="CVE-2024-27013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27042" id="CVE-2024-27042" type="cve" title="CVE-2024-27042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35809" id="CVE-2024-35809" type="cve" title="CVE-2024-35809"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35877" id="CVE-2024-35877" type="cve" title="CVE-2024-35877"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35884" id="CVE-2024-35884" type="cve" title="CVE-2024-35884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35944" id="CVE-2024-35944" type="cve" title="CVE-2024-35944"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35989" id="CVE-2024-35989" type="cve" title="CVE-2024-35989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36883" id="CVE-2024-36883" type="cve" title="CVE-2024-36883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36901" id="CVE-2024-36901" type="cve" title="CVE-2024-36901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36902" id="CVE-2024-36902" type="cve" title="CVE-2024-36902"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36919" id="CVE-2024-36919" type="cve" title="CVE-2024-36919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36920" id="CVE-2024-36920" type="cve" title="CVE-2024-36920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36922" id="CVE-2024-36922" type="cve" title="CVE-2024-36922"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36939" id="CVE-2024-36939" type="cve" title="CVE-2024-36939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-36953" id="CVE-2024-36953" type="cve" title="CVE-2024-36953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-37356" id="CVE-2024-37356" type="cve" title="CVE-2024-37356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38558" id="CVE-2024-38558" type="cve" title="CVE-2024-38558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38559" id="CVE-2024-38559" type="cve" title="CVE-2024-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38570" id="CVE-2024-38570" type="cve" title="CVE-2024-38570"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38579" id="CVE-2024-38579" type="cve" title="CVE-2024-38579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38581" id="CVE-2024-38581" type="cve" title="CVE-2024-38581"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38619" id="CVE-2024-38619" type="cve" title="CVE-2024-38619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39471" id="CVE-2024-39471" type="cve" title="CVE-2024-39471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39499" id="CVE-2024-39499" type="cve" title="CVE-2024-39499"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39501" id="CVE-2024-39501" type="cve" title="CVE-2024-39501"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39506" id="CVE-2024-39506" type="cve" title="CVE-2024-39506"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40901" id="CVE-2024-40901" type="cve" title="CVE-2024-40901"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40904" id="CVE-2024-40904" type="cve" title="CVE-2024-40904"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40911" id="CVE-2024-40911" type="cve" title="CVE-2024-40911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40912" id="CVE-2024-40912" type="cve" title="CVE-2024-40912"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40929" id="CVE-2024-40929" type="cve" title="CVE-2024-40929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40931" id="CVE-2024-40931" type="cve" title="CVE-2024-40931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40941" id="CVE-2024-40941" type="cve" title="CVE-2024-40941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40954" id="CVE-2024-40954" type="cve" title="CVE-2024-40954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40958" id="CVE-2024-40958" type="cve" title="CVE-2024-40958"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40959" id="CVE-2024-40959" type="cve" title="CVE-2024-40959"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40960" id="CVE-2024-40960" type="cve" title="CVE-2024-40960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40972" id="CVE-2024-40972" type="cve" title="CVE-2024-40972"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40977" id="CVE-2024-40977" type="cve" title="CVE-2024-40977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40978" id="CVE-2024-40978" type="cve" title="CVE-2024-40978"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40988" id="CVE-2024-40988" type="cve" title="CVE-2024-40988"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40989" id="CVE-2024-40989" type="cve" title="CVE-2024-40989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40995" id="CVE-2024-40995" type="cve" title="CVE-2024-40995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40997" id="CVE-2024-40997" type="cve" title="CVE-2024-40997"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40998" id="CVE-2024-40998" type="cve" title="CVE-2024-40998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41005" id="CVE-2024-41005" type="cve" title="CVE-2024-41005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41007" id="CVE-2024-41007" type="cve" title="CVE-2024-41007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41008" id="CVE-2024-41008" type="cve" title="CVE-2024-41008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41012" id="CVE-2024-41012" type="cve" title="CVE-2024-41012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41013" id="CVE-2024-41013" type="cve" title="CVE-2024-41013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41014" id="CVE-2024-41014" type="cve" title="CVE-2024-41014"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41023" id="CVE-2024-41023" type="cve" title="CVE-2024-41023"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41035" id="CVE-2024-41035" type="cve" title="CVE-2024-41035"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41038" id="CVE-2024-41038" type="cve" title="CVE-2024-41038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41039" id="CVE-2024-41039" type="cve" title="CVE-2024-41039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41040" id="CVE-2024-41040" type="cve" title="CVE-2024-41040"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41041" id="CVE-2024-41041" type="cve" title="CVE-2024-41041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41044" id="CVE-2024-41044" type="cve" title="CVE-2024-41044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41055" id="CVE-2024-41055" type="cve" title="CVE-2024-41055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41056" id="CVE-2024-41056" type="cve" title="CVE-2024-41056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41060" id="CVE-2024-41060" type="cve" title="CVE-2024-41060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41064" id="CVE-2024-41064" type="cve" title="CVE-2024-41064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41065" id="CVE-2024-41065" type="cve" title="CVE-2024-41065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41071" id="CVE-2024-41071" type="cve" title="CVE-2024-41071"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41076" id="CVE-2024-41076" type="cve" title="CVE-2024-41076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41090" id="CVE-2024-41090" type="cve" title="CVE-2024-41090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41091" id="CVE-2024-41091" type="cve" title="CVE-2024-41091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41097" id="CVE-2024-41097" type="cve" title="CVE-2024-41097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42084" id="CVE-2024-42084" type="cve" title="CVE-2024-42084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42090" id="CVE-2024-42090" type="cve" title="CVE-2024-42090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42094" id="CVE-2024-42094" type="cve" title="CVE-2024-42094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42096" id="CVE-2024-42096" type="cve" title="CVE-2024-42096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42114" id="CVE-2024-42114" type="cve" title="CVE-2024-42114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42124" id="CVE-2024-42124" type="cve" title="CVE-2024-42124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42131" id="CVE-2024-42131" type="cve" title="CVE-2024-42131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42152" id="CVE-2024-42152" type="cve" title="CVE-2024-42152"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42154" id="CVE-2024-42154" type="cve" title="CVE-2024-42154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42225" id="CVE-2024-42225" type="cve" title="CVE-2024-42225"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42226" id="CVE-2024-42226" type="cve" title="CVE-2024-42226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42228" id="CVE-2024-42228" type="cve" title="CVE-2024-42228"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42237" id="CVE-2024-42237" type="cve" title="CVE-2024-42237"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42238" id="CVE-2024-42238" type="cve" title="CVE-2024-42238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42240" id="CVE-2024-42240" type="cve" title="CVE-2024-42240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42246" id="CVE-2024-42246" type="cve" title="CVE-2024-42246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42265" id="CVE-2024-42265" type="cve" title="CVE-2024-42265"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42322" id="CVE-2024-42322" type="cve" title="CVE-2024-42322"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43830" id="CVE-2024-43830" type="cve" title="CVE-2024-43830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43871" id="CVE-2024-43871" type="cve" title="CVE-2024-43871"/>
      <reference href="https://bugzilla.redhat.com/2258012" id="2258012" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2258013" id="2258013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2260038" id="2260038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265799" id="2265799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2265838" id="2265838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266358" id="2266358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266750" id="2266750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267036" id="2267036" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267041" id="2267041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267795" id="2267795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267916" id="2267916" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2267925" id="2267925" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2268295" id="2268295" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2270103" id="2270103" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271648" id="2271648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271796" id="2271796" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272793" id="2272793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273141" id="2273141" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273148" id="2273148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2273180" id="2273180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275558" id="2275558" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275661" id="2275661" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275690" id="2275690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275742" id="2275742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277171" id="2277171" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278220" id="2278220" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278270" id="2278270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278447" id="2278447" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281217" id="2281217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281317" id="2281317" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281704" id="2281704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281720" id="2281720" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281807" id="2281807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281847" id="2281847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282324" id="2282324" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282345" id="2282345" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282354" id="2282354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282355" id="2282355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282356" id="2282356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282357" id="2282357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282366" id="2282366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282401" id="2282401" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282422" id="2282422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282440" id="2282440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282508" id="2282508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282511" id="2282511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282648" id="2282648" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282669" id="2282669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282676" id="2282676" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282757" id="2282757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282764" id="2282764" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282851" id="2282851" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282890" id="2282890" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282903" id="2282903" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2282918" id="2282918" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283389" id="2283389" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2283424" id="2283424" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284271" id="2284271" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284511" id="2284511" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284515" id="2284515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284545" id="2284545" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284596" id="2284596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284628" id="2284628" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284630" id="2284630" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2284634" id="2284634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293247" id="2293247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293270" id="2293270" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293273" id="2293273" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293304" id="2293304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293377" id="2293377" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293408" id="2293408" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293414" id="2293414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293423" id="2293423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293440" id="2293440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293441" id="2293441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293658" id="2293658" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2294313" id="2294313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297471" id="2297471" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297473" id="2297473" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297478" id="2297478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297488" id="2297488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297495" id="2297495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297496" id="2297496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297513" id="2297513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297515" id="2297515" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297525" id="2297525" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297538" id="2297538" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297542" id="2297542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297543" id="2297543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297544" id="2297544" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297556" id="2297556" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297561" id="2297561" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297562" id="2297562" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297572" id="2297572" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297573" id="2297573" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297579" id="2297579" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297581" id="2297581" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297582" id="2297582" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297589" id="2297589" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297706" id="2297706" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297909" id="2297909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298079" id="2298079" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298140" id="2298140" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298177" id="2298177" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298640" id="2298640" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299240" id="2299240" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299336" id="2299336" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2299452" id="2299452" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300296" id="2300296" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300297" id="2300297" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300381" id="2300381" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300402" id="2300402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300407" id="2300407" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300408" id="2300408" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300409" id="2300409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300410" id="2300410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300414" id="2300414" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300429" id="2300429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300430" id="2300430" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300434" id="2300434" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300439" id="2300439" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300440" id="2300440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300448" id="2300448" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300453" id="2300453" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300492" id="2300492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300533" id="2300533" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300552" id="2300552" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300709" id="2300709" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300713" id="2300713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301477" id="2301477" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301489" id="2301489" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301496" id="2301496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301519" id="2301519" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301522" id="2301522" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301543" id="2301543" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2301544" id="2301544" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303077" id="2303077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303505" id="2303505" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303506" id="2303506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303508" id="2303508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2303514" id="2303514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305410" id="2305410" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305467" id="2305467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305488" id="2305488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2306365" id="2306365" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7000.html" id="ALSA-2024:7000" type="self" title="ALSA-2024:7000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.22.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.22.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.22.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2297b81f15649bb14142a62d3622e49110e08ffaea40622d01429092eb381169</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7463</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-10-01 00:00:00"/>
    <updated date="2024-10-03 09:11:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7463" id="RHSA-2024:7463" type="rhsa" title="RHSA-2024:7463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176"/>
      <reference href="https://bugzilla.redhat.com/2314252" id="2314252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314253" id="2314253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7463.html" id="ALSA-2024:7463" type="self" title="ALSA-2024:7463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="cups-filters-devel" version="1.20.0" release="35.el8_10" epoch="0" arch="aarch64" src="cups-filters-1.20.0-35.el8_10.src.rpm">
          <filename>cups-filters-devel-1.20.0-35.el8_10.aarch64.rpm</filename>
          <sum type="sha256">059a99fdd2b9ae6914f99a9ff4bed1340127dccdf44c717c17df851fbabf4a61</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7851</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:22:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7851" id="RHSA-2024:7851" type="rhsa" title="RHSA-2024:7851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7851.html" id="ALSA-2024:7851" type="self" title="ALSA-2024:7851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.135" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.135-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3559b8f4160e20030437ca73b6fbeebcca398ebd682de70479658030cd1d41f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7868</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:20:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7868" id="RHSA-2024:7868" type="rhsa" title="RHSA-2024:7868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7868.html" id="ALSA-2024:7868" type="self" title="ALSA-2024:7868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.110" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.110-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1af19eed4761a1d5fefb18ee38c6137daa5f08a17c0767ef2ee8388c4db04f6a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8117</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:40:09"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8117" id="RHSA-2024:8117" type="rhsa" title="RHSA-2024:8117"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8117.html" id="ALSA-2024:8117" type="self" title="ALSA-2024:8117"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0cd8759b1b6af93611e607e1c177d1c9a23d73efb16438cd689cfa2e007ecbac</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">23b22e1f01a2beed3f84637aab45b45704f49cb4fa8e79732a876bf63bda02b1</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4cdecdeb1d6181b82a817108a31ff9d1dbf3e641a8178784bb1189e07a162f96</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">566e46f0d2cdd20571805756eee78dbf0b6f73009a4f72cc13b6ef4131c771fd</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8ebe058cc8197b2258e7d003fb039fe03b782f745f51fca10f3dc822ba2093cd</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b02ad8f067bcff39f2cad0ed7df83d757fe67bac6acf879388a54b0b037c25c7</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cb572530021f49701a7504f8cff186920358451c4381cd20775de18855e770ab</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d099cd14befd61d815d65dbc3c2be45cf6c4a8c4d5def56ecb2f5228f2cf5e71</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d8552d36a0e882bdd1a3f5979b7a34bdfa832231390376eba3f0cd2ba9888d43</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f6604f7059554d98fbfab8930129795904dd8275f9a6c1c7b1860568cfe69e07</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">fd9e7677baca09fccb093e796bfa7547e596caf998a1b70dc2393da766d31f6a</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.432.b06" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.432.b06-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.432.b06-2.el8.aarch64.rpm</filename>
          <sum type="sha256">fe88c1a19307e7b2204c681daaae1f1cd4a1550b4e9dc218d211800b4782b430</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8121</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:37:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8121" id="RHSA-2024:8121" type="rhsa" title="RHSA-2024:8121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8121.html" id="ALSA-2024:8121" type="self" title="ALSA-2024:8121"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-11-openjdk-static-libs-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">01fbb22a93ed05a1601effd76c1e2813b3c8d0d1be807ba5d6b654867ba51f80</sum>
        </package>
        <package name="java-11-openjdk-devel-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1c271bb1a8d5f64e49ed818b8db34f7af78e95e92a7e6470478aa17701ca9bd8</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">24860559c9a35772922282c0c8193d27c830b876b879176eab26d86a37ec0758</sum>
        </package>
        <package name="java-11-openjdk-src-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">341f59a93e00daf842749927542beb18cd82b1e07367e1aabdaa5d777e0ff5d7</sum>
        </package>
        <package name="java-11-openjdk-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">39ba674bc33b6c1e1b8227f47dd8b7b5545fdba9ee7d0f7b5184a60a443d88ec</sum>
        </package>
        <package name="java-11-openjdk-demo-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4e8521b9bdf84aaec343b4d8d7c524bd246e2d24204607ab76db1c80e99053c5</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">5365fbad015cb57a91f967507404cd77815fa7930fea5b74552ce67389ab96f9</sum>
        </package>
        <package name="java-11-openjdk-jmods-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6079d11d91e5ead1bd5aaf526970b1d58d672b9fc0e455caf3133995f5dfe7b3</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">64e9ccb1b0de92521090b598677afe90614e6a4efd35771f2ada39ef36ed6b4b</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">869470c9ce25201f4bf90de5d11c1a5ea934ab7ab08064e2f96ef35b5a480535</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c5ceed74b5eb2787db2c518e564ab1010045ef9058e49403e388d7ac6f27c772</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d3f4543b69631f11db987a8fa5edd4d3485fb113e56b99d67a2adaa9bd0da0ee</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">e2f63c9e69bcb4e2562cafa34ca66e6462db5cb1e08030c29205cf7ec0c9cbf0</sum>
        </package>
        <package name="java-11-openjdk-headless-fastdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="aarch64" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-fastdebug-11.0.25.0.9-2.el8.aarch64.rpm</filename>
          <sum type="sha256">f89f6d6266a0686d0802eb5fe8264b062169c1fea53012010cc51929b834121d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8124</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:31:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8124" id="RHSA-2024:8124" type="rhsa" title="RHSA-2024:8124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8124.html" id="ALSA-2024:8124" type="self" title="ALSA-2024:8124"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">112dd38e95d0c6be30f20d6093225f06d8d87af627e87739116cff959a436252</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">31be2714f6291587e7ca28acd6fed1dce4ae19c9af9af4707aa3e8ac63c77243</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">377dc5acb949906803166f1ce1e85abc49c834e230b0ae0067e16ef00f8888c5</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">442e141e87d1099c8a2729088df43c177dc94dfb45d243a5ecad323a3c544611</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">48822acb12046f5febe2ed6e7e30219d0b7d8cc65f0da1c39489cb0a3ef89c1f</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">74e823020081aac117253f066df23e55930680d933e779732e6993eaf01cb24e</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">86d86a4001ba4108b0e5cc8273f8482466ab352434981c7ebbba30ed93545334</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">cd6dbf88eb05533cd47d83e7824d3cb491a87d1d1926d4a8bb00f4b76b03811c</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d28b3045eab9c118080021fc1e2fb93b815b6abc550888b1da1957b66522b520</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d86c072cf3f6c81c16d27dc63fcd5b193a7d92e22e2e53047c3bb635f606c520</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">da389f3bb60de2636e2f9c796fc4c8ba773f922bece4f0fe039a05dd452ec167</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e3db2790ac6478497c4db8a386838d5fda53cf104f955dcaad5b9d14b0777739</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f4601938f039999cbfd3bd4fc6eb38b31cb32395b5b41ebac2520041fddecf8a</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.13.0.11-3.el8.aarch64.rpm</filename>
          <sum type="sha256">f62972a4f0277dbb5ddca4d1aeb758da973a660f44e79bf6300994bb0a3a07cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8127</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:27:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 runtime environment.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8127" id="RHSA-2024:8127" type="rhsa" title="RHSA-2024:8127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8127.html" id="ALSA-2024:8127" type="self" title="ALSA-2024:8127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">0d4ca86a9ec176753dca029f68eafe093e59edbe1ced6b26d4996ad6830d65e7</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">200f444ab931745c9446e453c9ee898eae330c13b2a16f829144854b2eacf8f2</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">225b5144943ba467c05b49e2c6374cb4dbb2b9aa031c67f491a5ecbab5353c6a</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">32961987342fdbefa0bee744fc56d0fa92b09e45c7fae0361c8ec2413cbf3104</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">4fecfdc58ffe29c1be7def9858e2d26aaa0492f7a77c6ba50c13790b9445f0b0</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">559472a3194b69e5346f3991a6e369fc44498d510637e26e0193de8553238e1d</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">56618145dd10b71f0ca2a758bbce6bbf252260fac233f0944e63e6bbb7243185</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">61a0d33df8f785507596247b09c242e9b0a34ecd59a9c6383167a2e4a0432c12</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6bb4cc2f937ea31b7ee70b96c6318440e30748e5a2d149002889f5da65d9437a</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">85e89ff9acf98aca05361113765990f55b52cef86e4cb67160cb68cd5a1352d7</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">cbc9f11b6c09b92b63b4dac6014f06c393c5451bf0594f7a59af35b01058c033</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">cf6be706f4502993e0c4d16458c1cfcaecd39bfd8b7076770c7bde3d8a7b9088</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">e57651a2bc3d7cb2ad2965218f8934cbf9b269817fba131b72e262d983d3dc88</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.5.0.10-3.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">f1288603fa0e1fbfb30ef0052bbd46bb2d762d88198a4748afb174c2a18d82b7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8359</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-10-23 00:00:00"/>
    <updated date="2024-10-24 07:35:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8359" id="RHSA-2024:8359" type="rhsa" title="RHSA-2024:8359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8359.html" id="ALSA-2024:8359" type="self" title="ALSA-2024:8359"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020241023131949" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-debug" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="aarch64" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-debug-3.9.20-1.module_el8.10.0+3902+1690be06.aarch64.rpm</filename>
          <sum type="sha256">a811e23184222220d02ab37c89867cd4a79fc397a199d94c5064c4e74d1ce622</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8798</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-06 10:17:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8798" id="RHSA-2024:8798" type="rhsa" title="RHSA-2024:8798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8798.html" id="ALSA-2024:8798" type="self" title="ALSA-2024:8798"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="25.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-25.el8_10.noarch.rpm</filename>
          <sum type="sha256">5a3aaf5c4e2ae33f137d83a93d9beb20e9b5daead1ffa2fb603e9c3bc1a78c6c</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="25.el8_10" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-25.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f47ed509d2a44f15bd8126aa88eef75d019afbf3236857f74d32273f2c749763</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8831</id>
    <title>Low: bcc security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:14:51"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>bcc security update</summary>
    <description>BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.  

Security Fix(es):  

  * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8831" id="RHSA-2024:8831" type="rhsa" title="RHSA-2024:8831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2314" id="CVE-2024-2314" type="cve" title="CVE-2024-2314"/>
      <reference href="https://bugzilla.redhat.com/2269019" id="2269019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8831.html" id="ALSA-2024:8831" type="self" title="ALSA-2024:8831"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bcc-devel" version="0.25.0" release="9.el8_10" epoch="0" arch="aarch64" src="bcc-0.25.0-9.el8_10.src.rpm">
          <filename>bcc-devel-0.25.0-9.el8_10.aarch64.rpm</filename>
          <sum type="sha256">32c8865577a41900f71a06edcb40622846f8794daf913267a54101de8eb9e947</sum>
        </package>
        <package name="bcc-doc" version="0.25.0" release="9.el8_10" epoch="0" arch="noarch" src="bcc-0.25.0-9.el8_10.src.rpm">
          <filename>bcc-doc-0.25.0-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">6870744d30cb6e752d3f47214e27923d84a25f8748705c1d5dc3a6bbc42308a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8833</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:13:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8833" id="RHSA-2024:8833" type="rhsa" title="RHSA-2024:8833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7006" id="CVE-2024-7006" type="cve" title="CVE-2024-7006"/>
      <reference href="https://bugzilla.redhat.com/2302996" id="2302996" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8833.html" id="ALSA-2024:8833" type="self" title="ALSA-2024:8833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="33.el8_10" epoch="0" arch="aarch64" src="libtiff-4.0.9-33.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-33.el8_10.aarch64.rpm</filename>
          <sum type="sha256">750f57fc73831493e0c881cc0fc1bb7e27dc7ec87de44c69c4b8c8787e7b803d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8836</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:10:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. For the unversioned "python" executable, see manual page "unversioned-python".  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8836" id="RHSA-2024:8836" type="rhsa" title="RHSA-2024:8836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8836.html" id="ALSA-2024:8836" type="self" title="ALSA-2024:8836"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-idle" version="3.12.6" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.6-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4eea0089b396d64bcce412621f9a1b8c4e4f86e6cb19bc5f5f27cac0a4755cdd</sum>
        </package>
        <package name="python3.12-test" version="3.12.6" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.6-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">71f977c2ef6a5801b6e1e31f22334bdb29d8ae4851908c4f6dd70c3d98f11e0e</sum>
        </package>
        <package name="python3.12-debug" version="3.12.6" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.6-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">81b2bb17cb450f86c487769ab6672e097f945f3cde66d89c133c6c5668bfc2e6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8838</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:08:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8838" id="RHSA-2024:8838" type="rhsa" title="RHSA-2024:8838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8838.html" id="ALSA-2024:8838" type="self" title="ALSA-2024:8838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-idle" version="3.11.10" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.10-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3f6725c624c22bb62878292b1510f847995a116ce20d99462a97e4fda4cf3c1a</sum>
        </package>
        <package name="python3.11-test" version="3.11.10" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.10-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">7a1984f3ab894c8d4cdf52b2dc590cf36eb6da05756e3ad317e5879ad8141c68</sum>
        </package>
        <package name="python3.11-debug" version="3.11.10" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.10-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">98beb5236d834bca918a441ae3db5eacebc28fcda66d3767cb709860f05e1e4b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8856</id>
    <title>Moderate: kernel security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 09:58:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/bluetooth: race condition in conn_info_{min,max}_age_set() (CVE-2024-24857)
  * kernel: dmaengine: fix NULL pointer in channel unregistration function (CVE-2023-52492)
  * kernel: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (CVE-2024-26851)
  * kernel: netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924)
  * kernel: netfilter: nft_set_pipapo: walk over current view on netlink dump (CVE-2024-27017)
  * kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed (CVE-2024-26976)
  * kernel: nouveau: lock the client object tree. (CVE-2024-27062)
  * kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info (CVE-2024-35839)
  * kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (CVE-2024-35898)
  * kernel: dma-direct: Leak pages on dma_set_decrypted() failure (CVE-2024-35939)
  * kernel: net/mlx5e: Fix netif state handling (CVE-2024-38608)
  * kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586)
  * kernel: of: module: add buffer overflow check in of_modalias() (CVE-2024-38541)
  * kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (CVE-2024-38540)
  * kernel: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (CVE-2024-39503)
  * kernel: drm/i915/dpt: Make DPT object unshrinkable (CVE-2024-40924)
  * kernel: ipv6: prevent possible NULL deref in fib6_nh_init() (CVE-2024-40961)
  * kernel: tipc: force a dst refcount before doing decryption (CVE-2024-40983)
  * kernel: ACPICA: Revert &amp;#34;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&amp;#34; (CVE-2024-40984)
  * kernel: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CVE-2022-48773)
  * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009)
  * kernel: netfilter: nf_tables: prefer nft_chain_validate (CVE-2024-41042)
  * kernel: ibmvnic: Add tx check to prevent skb leak (CVE-2024-41066)
  * kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers (CVE-2024-41092)
  * kernel: drm/amdgpu: avoid using null object of framebuffer (CVE-2024-41093)
  * kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (CVE-2024-42070)
  * kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)
  * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244)
  * kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)
  * kernel: kobject_uevent: Fix OOB access within zap_modalias_env() (CVE-2024-42292)
  * kernel: dev/parport: fix the array out-of-bounds risk (CVE-2024-42301)
  * kernel: block: initialize integrity buffer to zero before writing it to media (CVE-2024-43854)
  * kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning (CVE-2024-43880)
  * kernel: gso: do not skip outer ip header in case of ipip and net_failover (CVE-2022-48936)
  * kernel: padata: Fix possible divide-by-0 panic in padata_mt_helper() (CVE-2024-43889)
  * kernel: memcg: protect concurrent access to mem_cgroup_idr (CVE-2024-43892)
  * kernel: sctp: Fix null-ptr-deref in reuseport_add_sock(). (CVE-2024-44935)
  * kernel: bonding: fix xfrm real_dev null pointer dereference (CVE-2024-44989)
  * kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok (CVE-2024-44990)
  * kernel: netfilter: flowtable: initialise extack before use (CVE-2024-45018)
  * kernel: ELF: fix kernel.randomize_va_space double read (CVE-2024-46826)
  * kernel: lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (CVE-2024-47668)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8856" id="RHSA-2024:8856" type="rhsa" title="RHSA-2024:8856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48773" id="CVE-2022-48773" type="cve" title="CVE-2022-48773"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48936" id="CVE-2022-48936" type="cve" title="CVE-2022-48936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52492" id="CVE-2023-52492" type="cve" title="CVE-2023-52492"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24857" id="CVE-2024-24857" type="cve" title="CVE-2024-24857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26851" id="CVE-2024-26851" type="cve" title="CVE-2024-26851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26924" id="CVE-2024-26924" type="cve" title="CVE-2024-26924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26976" id="CVE-2024-26976" type="cve" title="CVE-2024-26976"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27017" id="CVE-2024-27017" type="cve" title="CVE-2024-27017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-27062" id="CVE-2024-27062" type="cve" title="CVE-2024-27062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35839" id="CVE-2024-35839" type="cve" title="CVE-2024-35839"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35898" id="CVE-2024-35898" type="cve" title="CVE-2024-35898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35939" id="CVE-2024-35939" type="cve" title="CVE-2024-35939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38540" id="CVE-2024-38540" type="cve" title="CVE-2024-38540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38541" id="CVE-2024-38541" type="cve" title="CVE-2024-38541"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38586" id="CVE-2024-38586" type="cve" title="CVE-2024-38586"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38608" id="CVE-2024-38608" type="cve" title="CVE-2024-38608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39503" id="CVE-2024-39503" type="cve" title="CVE-2024-39503"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40924" id="CVE-2024-40924" type="cve" title="CVE-2024-40924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40961" id="CVE-2024-40961" type="cve" title="CVE-2024-40961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40983" id="CVE-2024-40983" type="cve" title="CVE-2024-40983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40984" id="CVE-2024-40984" type="cve" title="CVE-2024-40984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41009" id="CVE-2024-41009" type="cve" title="CVE-2024-41009"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41042" id="CVE-2024-41042" type="cve" title="CVE-2024-41042"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41066" id="CVE-2024-41066" type="cve" title="CVE-2024-41066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41092" id="CVE-2024-41092" type="cve" title="CVE-2024-41092"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41093" id="CVE-2024-41093" type="cve" title="CVE-2024-41093"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42070" id="CVE-2024-42070" type="cve" title="CVE-2024-42070"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42079" id="CVE-2024-42079" type="cve" title="CVE-2024-42079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42244" id="CVE-2024-42244" type="cve" title="CVE-2024-42244"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42284" id="CVE-2024-42284" type="cve" title="CVE-2024-42284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42292" id="CVE-2024-42292" type="cve" title="CVE-2024-42292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42301" id="CVE-2024-42301" type="cve" title="CVE-2024-42301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43854" id="CVE-2024-43854" type="cve" title="CVE-2024-43854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43880" id="CVE-2024-43880" type="cve" title="CVE-2024-43880"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43889" id="CVE-2024-43889" type="cve" title="CVE-2024-43889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43892" id="CVE-2024-43892" type="cve" title="CVE-2024-43892"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44935" id="CVE-2024-44935" type="cve" title="CVE-2024-44935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44989" id="CVE-2024-44989" type="cve" title="CVE-2024-44989"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44990" id="CVE-2024-44990" type="cve" title="CVE-2024-44990"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45018" id="CVE-2024-45018" type="cve" title="CVE-2024-45018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46826" id="CVE-2024-46826" type="cve" title="CVE-2024-46826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47668" id="CVE-2024-47668" type="cve" title="CVE-2024-47668"/>
      <reference href="https://bugzilla.redhat.com/2266247" id="2266247" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2269183" id="2269183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275750" id="2275750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277168" id="2277168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278262" id="2278262" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278350" id="2278350" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278387" id="2278387" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281284" id="2281284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281669" id="2281669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2281817" id="2281817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293356" id="2293356" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293402" id="2293402" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293458" id="2293458" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2293459" id="2293459" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297475" id="2297475" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297508" id="2297508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297545" id="2297545" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297567" id="2297567" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297568" id="2297568" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298109" id="2298109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298412" id="2298412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300412" id="2300412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300442" id="2300442" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300487" id="2300487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300488" id="2300488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300508" id="2300508" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2300517" id="2300517" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307862" id="2307862" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307865" id="2307865" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307892" id="2307892" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309852" id="2309852" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309853" id="2309853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2311715" id="2311715" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315178" id="2315178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2317601" id="2317601" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8856.html" id="ALSA-2024:8856" type="self" title="ALSA-2024:8856"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.27.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.27.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.27.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">70441a40a62987f70fb94bdeefd893004ac0a598b60274fb23da081d0becc99c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8859</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 09:55:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.  

Security Fix(es):  

  * libexpat: Integer Overflow or Wraparound (CVE-2024-45491)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8859" id="RHSA-2024:8859" type="rhsa" title="RHSA-2024:8859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45491" id="CVE-2024-45491" type="cve" title="CVE-2024-45491"/>
      <reference href="https://bugzilla.redhat.com/2308616" id="2308616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8859.html" id="ALSA-2024:8859" type="self" title="ALSA-2024:8859"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xmlrpc-c-devel" version="1.51.0" release="10.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-10.el8_10.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-10.el8_10.aarch64.rpm</filename>
          <sum type="sha256">446b427728c71fcdfec0af5909906b11110423d52d8d91ff3791c4e15d71d4e8</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="10.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-10.el8_10.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-10.el8_10.aarch64.rpm</filename>
          <sum type="sha256">81fe3060be294f7817a2dd55475029d4f9b4ab93e34400b61d866c2febf0ae2d</sum>
        </package>
        <package name="xmlrpc-c-c++" version="1.51.0" release="10.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-10.el8_10.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-10.el8_10.aarch64.rpm</filename>
          <sum type="sha256">a06126ab787746e26aa97580dcd549e8557c3a4e4cae5778247004a072b64b32</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0065</id>
    <title>Important: kernel security update</title>
    <issued date="2025-01-08 00:00:00"/>
    <updated date="2025-01-08 21:26:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: i40e: fix race condition by adding filter's intermediate sync state (CVE-2024-53088)
  * kernel: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0065" id="RHSA-2025:0065" type="rhsa" title="RHSA-2025:0065"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53088" id="CVE-2024-53088" type="cve" title="CVE-2024-53088"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53122" id="CVE-2024-53122" type="cve" title="CVE-2024-53122"/>
      <reference href="https://bugzilla.redhat.com/2327328" id="2327328" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2329932" id="2329932" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0065.html" id="ALSA-2025:0065" type="self" title="ALSA-2025:0065"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.34.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.34.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.34.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">42e5433241b6d7addf3085a5c9fb7f6122eb6706a7d425496db7efc9ba7ef4d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0222</id>
    <title>Important: dpdk security update</title>
    <issued date="2025-01-09 00:00:00"/>
    <updated date="2025-01-10 12:45:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dpdk security update</summary>
    <description>The dpdk packages provide the Data Plane Development Kit, which is a set of libraries and drivers for fast packet processing in the user space.  

Security Fix(es):  

  * dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library (CVE-2024-11614)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0222" id="RHSA-2025:0222" type="rhsa" title="RHSA-2025:0222"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11614" id="CVE-2024-11614" type="cve" title="CVE-2024-11614"/>
      <reference href="https://bugzilla.redhat.com/2327955" id="2327955" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0222.html" id="ALSA-2025:0222" type="self" title="ALSA-2025:0222"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dpdk-devel" version="23.11" release="2.el8_10" epoch="0" arch="aarch64" src="dpdk-23.11-2.el8_10.src.rpm">
          <filename>dpdk-devel-23.11-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5323ffb6587dd4643b1021c4c9a122708e93a03a8785d27ba8293ac449bca747</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0288</id>
    <title>Moderate: Bug fix of NetworkManager</title>
    <issued date="2025-01-13 00:00:00"/>
    <updated date="2025-01-13 21:27:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Bug fix of NetworkManager</summary>
    <description>Security and Bug Fix(es):  

  * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)
  * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051)
  * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0288" id="RHSA-2025:0288" type="rhsa" title="RHSA-2025:0288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0288.html" id="ALSA-2025:0288" type="self" title="ALSA-2025:0288"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="NetworkManager-libnm-devel" version="1.40.16" release="18.el8_10" epoch="1" arch="aarch64" src="NetworkManager-1.40.16-18.el8_10.src.rpm">
          <filename>NetworkManager-libnm-devel-1.40.16-18.el8_10.aarch64.rpm</filename>
          <sum type="sha256">98aacba0c7f28624602d26997276f9f8e5238ad1fed2dd4fd9fb39a5913be9ac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0314</id>
    <title>Important: raptor2 security update</title>
    <issued date="2025-01-14 00:00:00"/>
    <updated date="2025-01-15 13:08:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>raptor2 security update</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.   

Security Fix(es):  

  * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0314" id="RHSA-2025:0314" type="rhsa" title="RHSA-2025:0314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57823" id="CVE-2024-57823" type="cve" title="CVE-2024-57823"/>
      <reference href="https://bugzilla.redhat.com/2336921" id="2336921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0314.html" id="ALSA-2025:0314" type="self" title="ALSA-2025:0314"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="raptor2" version="2.0.15" release="17.el8_10" epoch="0" arch="aarch64" src="raptor2-2.0.15-17.el8_10.src.rpm">
          <filename>raptor2-2.0.15-17.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4576b418e573295c0559b771ff227e8ad5a90676f3a1215cefa13814834a5339</sum>
        </package>
        <package name="raptor2-devel" version="2.0.15" release="17.el8_10" epoch="0" arch="aarch64" src="raptor2-2.0.15-17.el8_10.src.rpm">
          <filename>raptor2-devel-2.0.15-17.el8_10.aarch64.rpm</filename>
          <sum type="sha256">bf26495854969b9dfda61a665b1828d1e45c4a26883b9a23e94c7b8ba5b09cd1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0381</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:10:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.  

Security Fix(es):  

  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0381" id="RHSA-2025:0381" type="rhsa" title="RHSA-2025:0381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0381.html" id="ALSA-2025:0381" type="self" title="ALSA-2025:0381"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.112" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">697d7c06f78eac1c9b2c66178f9bb4e1236461912e55b931a42eff6d01a388a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0382</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:07:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.102 and .NET Runtime 9.0.1.  

Security Fix(es):  

  * dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0382" id="RHSA-2025:0382" type="rhsa" title="RHSA-2025:0382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21171" id="CVE-2025-21171" type="cve" title="CVE-2025-21171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337958" id="2337958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0382.html" id="ALSA-2025:0382" type="self" title="ALSA-2025:0382"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.102" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.102-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">34cf8482237058acf640cf70522f7ec7a04445d3347f2fbc9d334de9fb67966f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0422</id>
    <title>Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 11:12:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


Bug Fix(es):  

  * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872).


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0422" id="RHSA-2025:0422" type="rhsa" title="RHSA-2025:0422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0422.html" id="ALSA-2025:0422" type="self" title="ALSA-2025:0422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">0b0be97c1d5b5eb5c2daf14db145f3f717ef1a713fa24c03a26561f13bd947b5</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">4510fb30b986d25b87f8484488106c876d88e0ba1b293c6d3a1ca76c2878a442</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">610412bff638d3dd17bd96d720c06c89a007eebbd0982acf4948385a9e550a16</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">6c5ff16b59e7d7ce881b83969d1fa92e45722ac29fcc9349ff147f64573effe0</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">76a39f2690ba76ef38aee5de10b030cc13a29e4c0fa077884aa613ec6d256eaa</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">81610da31e6b17b4694ce0a768b8ada3d308122f908b36237b9714b525f96c4a</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">824a4e98b190eb0b7846fcc0a3b6e3ce26e205c27f49b3074af829d2c51149a0</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">9de08307f9526e4df9f78b1cdaab7c463df9440c433621cd7479c560d40ccb26</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">9ea2d8cfec1e7560008eed0dd4fe2f35bcd9d1000b8e5938a1bc660d216558b7</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">af5371a5e382017a9d90fcea48b2acae2520821c944c48b6e3f6f43e9ff3c64b</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">d5700bf796c36c7a568118299161ededfc488714b46a031e0baa125f363243e3</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">de7640e8d5cc0bc74c2cc63da089c6c4bcc27aaca33ca53000b45b485bfabd8f</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e44479970a5b00dc4496d4f7eb174bbe3cdd8ef3040320895aee6ffc4509f823</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.14.0.7-3.el8.aarch64.rpm</filename>
          <sum type="sha256">e83841e4f0e9d9835622c1b6e740102d878b2b91b9991a894118c46e77835197</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0426</id>
    <title>Moderate: java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 14:02:42"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0426" id="RHSA-2025:0426" type="rhsa" title="RHSA-2025:0426"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0426.html" id="ALSA-2025:0426" type="self" title="ALSA-2025:0426"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">012d4b6627ec43e9153eab26a95ff8641f25ab075da66c286bd013b36a0cf480</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">073fc08da2e07dc23dca9e747d8807609fd18468a185b53c252f1108588f3d81</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">1109e4834cfa35d72e2b0f0920ce19f6282e17f0238d8d30c4376ea140bf7716</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2878488b7f20fb572fe920cf0773391c7646398a42de86c52c21aeadcdf17b7a</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2e957a45d5633dd9ab7fb61c79d5533a17b4785d134ec614242869defcc60016</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">30827aa1d213d199b46f2031fcd70bfe1608d7b929cee50b743ff26c067a5e02</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">33451ec87a55096c33a12db1e104a23aee9ba7bea470b18a8c0c984a6c56aabd</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">33f1db7d63dcf60fbe63eecd0625d884a81ad229797a1a2065081dcaf6d41306</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">368c90ee4e1af6281816a0523c98ad3864edffca49e691fa6cc068fccd3720e1</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">37ebc6831819c793cbfcb015edc17945db75545fd56a2822c1c6f9ebc8110f0a</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">697028933ee6cff16f3f115b3ba3ad606491c7f41a49cfd70baa16fa1efcd92e</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">75da796713304d00757112b1cbe7b1b79c4546355024c7329f9e36ac32210e36</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">a03d1e1407559f7ceb39b88d229499376af79db8a5b04fe1c513ca476050416a</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.6.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b4ce97fed390dfa089eb44e9ae0307db6f9e6602e9d6ec153bdfc3713ac24350</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10026</id>
    <title>Important: python3.11 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:35:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10026" id="RHSA-2025:10026" type="rhsa" title="RHSA-2025:10026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10026.html" id="ALSA-2025:10026" type="self" title="ALSA-2025:10026"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.13" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">26cd5dd102fd0d3165209a01d544016352dd95d95d51ba36ae40a8308a0a638d</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6ac6965e120cca474cc2cbee74af3aeb908c48a7d70f0998904ba95bee4cd8b6</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="1.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6f597a66dd43de2ef67ab01275d4c757c858121b8c204b19f6749f6533a00516</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10031</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:39:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10031" id="RHSA-2025:10031" type="rhsa" title="RHSA-2025:10031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10031.html" id="ALSA-2025:10031" type="self" title="ALSA-2025:10031"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.11" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.11-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">485a1f7fc13a1417d68043b3c95a998b2a824e880eacc68d1b909622e696b421</sum>
        </package>
        <package name="python3.12-debug" version="3.12.11" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.11-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">60609172944aa4786c400800c6e0562f629092dbb20a0a6ce77e1da6d8537245</sum>
        </package>
        <package name="python3.12-idle" version="3.12.11" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.11-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e028d6bf006c5cb8d3f8c795a4dc1ae687d5431d91424826599cbb7e87724a8f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10618</id>
    <title>Moderate: jq security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-09 08:08:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)
  * jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10618" id="RHSA-2025:10618" type="rhsa" title="RHSA-2025:10618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23337" id="CVE-2024-23337" type="cve" title="CVE-2024-23337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48060" id="CVE-2025-48060" type="cve" title="CVE-2025-48060"/>
      <reference href="https://bugzilla.redhat.com/2367807" id="2367807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367842" id="2367842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10618.html" id="ALSA-2025:10618" type="self" title="ALSA-2025:10618"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="jq-devel" version="1.6" release="11.el8_10" epoch="0" arch="aarch64" src="jq-1.6-11.el8_10.src.rpm">
          <filename>jq-devel-1.6-11.el8_10.aarch64.rpm</filename>
          <sum type="sha256">839e246ccc5eaa4e09f07c42a621ee4b9d8980d5ba2208d8873077cc19a4a014</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10669</id>
    <title>Important: kernel security update</title>
    <issued date="2025-07-09 00:00:00"/>
    <updated date="2025-07-10 13:00:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: Fix use after free in hci_send_acl (CVE-2022-49111)
  * kernel: Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CVE-2022-49136)
  * kernel: udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CVE-2022-49846)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10669" id="RHSA-2025:10669" type="rhsa" title="RHSA-2025:10669"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49111" id="CVE-2022-49111" type="cve" title="CVE-2022-49111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49136" id="CVE-2022-49136" type="cve" title="CVE-2022-49136"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49846" id="CVE-2022-49846" type="cve" title="CVE-2022-49846"/>
      <reference href="https://bugzilla.redhat.com/2347952" id="2347952" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348179" id="2348179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363432" id="2363432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10669.html" id="ALSA-2025:10669" type="self" title="ALSA-2025:10669"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.60.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.60.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.60.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1f1be404aadd3ca0802cf5290c7584126b89cc475e4a1fd64833bddeb3a46bc8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1068</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-02-05 00:00:00"/>
    <updated date="2025-02-08 20:01:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: scsi: core: Fix unremoved procfs host directory regression (CVE-2024-26935)
  * kernel: arm64/sve: Discard stale CPU state when handling SVE traps (CVE-2024-50275)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1068" id="RHSA-2025:1068" type="rhsa" title="RHSA-2025:1068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26935" id="CVE-2024-26935" type="cve" title="CVE-2024-26935"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50275" id="CVE-2024-50275" type="cve" title="CVE-2024-50275"/>
      <reference href="https://bugzilla.redhat.com/2278235" id="2278235" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327198" id="2327198" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1068.html" id="ALSA-2025:1068" type="self" title="ALSA-2025:1068"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.37.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.37.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.37.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c771adc1ee5120827f10dc7c5fb7bd3d3d58ba9f06e8f0bf961671727cbceb60</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10862</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2025-07-17 00:00:00"/>
    <updated date="2025-07-21 09:43:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve scripting supports (CVE-2025-30761)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * On certain system configurations where the IPv4 stack was preferred over IPv6 (either due to -Djava.net.preferIPv4Stack=true being specified or no IPv6 interfaces being present), the method java.net.InetAddress.getLocalHost().getHostName() would return the fully qualified hostname instead of the short hostname. This behavior was only ever intended for Solaris systems and it deviated from the method's behavior for IPv6 interfaces. In this release, the method will return the short hostname on all interfaces. (AlmaLinux-102904, AlmaLinux-102905, AlmaLinux-102906, AlmaLinux-102907, AlmaLinux-102908, AlmaLinux-102909, AlmaLinux-102910, AlmaLinux-102911, AlmaLinux-102912)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10862" id="RHSA-2025:10862" type="rhsa" title="RHSA-2025:10862"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30761" id="CVE-2025-30761" type="cve" title="CVE-2025-30761"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10862.html" id="ALSA-2025:10862" type="self" title="ALSA-2025:10862"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">077fcb285bc0dd72a24371e994319adce4809a1c7383d178dc0170faf2abed8a</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">1b662990e80c06fd6ebe999d4e0b1de30d28e54763ca3b76de2950b148f94bda</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">35dca0fcf29651dc9d4d47993e6dd066b0b34ce41a28dc6b3ac695d2934ef92b</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">41fe2c5a494daa96ea64a9d7044837c8409664aa7f467f159db2e36b791d0f3a</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">583cce3af5b8f5baf2c27d489b15fbfcaa2c7f4503be327add05168ca748058a</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">732aca7704c0b6fe7fb61f0e06bd533853608e6cf259ba963457df08cce19cb3</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9eccbf1586f829150b47ffccb1fae2dbc010d017047da0955ff110a6f68564d3</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ae6b9f4136a3e6c84153c201789be2ae19157e4fd7e067ae2c2ea9e9553d072f</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">b1ef52e56b98dbb901e9e2c12c9f8aefd57d1cd48ddc20902b308bc23e0c66d8</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c0e601921df4230a8f6e4f4df4d6239f13f932fc919f15a0250643266e6a3288</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d19e63f12cee3e13124f78fe0e66b76a92ee88f1548866c0bcc771b9d762e6f5</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.462.b08" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.462.b08-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.462.b08-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d30d19479cfa726d959ae71fd8b607289d1388d7efae4a34614b202e362bb9ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10867</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:47:22"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10867" id="RHSA-2025:10867" type="rhsa" title="RHSA-2025:10867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10867.html" id="ALSA-2025:10867" type="self" title="ALSA-2025:10867"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">10f4bd88d8130c0aaa05742948b37a17f5613d6b3ca3e630e987df1ea6176d29</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">249c600582196bacbada5d9332c580aada6587a818d8f833847097c916470989</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">312ed33aa82f4412e0d13adc67648ba55487166ae8206bf6c24b58761be68daf</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3a5a3313bd170174f27ea54e2d94ea27898e395949d29d7a21452ed9e13ba301</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">778cccbab5ed79fe486fb910d652f8fdbbc88c6494ff0e3b19e3ae622e13e071</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8b40009904e958e8c8d91761976399cdbdb2a0551a814a4374bd760c7c8a6687</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">8ba281cfa60a8b002cf07fa220500fb0f20a6afb774cdf3d7ba0507e7f8929e5</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">94f668358437e18897a880cca24c920e32f8508d27cfa676d037d7baed307175</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">9b77e709e58b40a612d3f54a535b03d8f7f214e685ac81c5ec6bf0815018a04a</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">a4ef3c20a54279ecd8959aa18c05e3a9c7d0a8320d35da18f87a4fd9b6b40f37</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">be780a5a7421fdb727c74a65a7388dd508247d88637534a9ce1c01cc90d56b6e</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cb8ff37deebe5ffbb26f571197ab8db93ae3f0b1617bbb07e94a8dedaa2ebe49</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">d901d3894f2f04de8f0a36630df31c703aca14f984ff636f3fd20d9a9a5eeed6</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.16.0.8-2.el8.aarch64.rpm</filename>
          <sum type="sha256">da815f26261db00ae208592e224fc1059929c62ccd64a49e3735952e745f0ee2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10873</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-30 13:16:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685)
  * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10873" id="RHSA-2025:10873" type="rhsa" title="RHSA-2025:10873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10873.html" id="ALSA-2025:10873" type="self" title="ALSA-2025:10873"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">00048b899598c2a99219c10075b34c48496887ba90ba80a5a937b737255e8a50</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">00d9c853dde84bc69a9173feab273a3a53b156b6f4457edf3adfacb67be98adb</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">07e242e7027a496d679cb1e037721cd8e15ff8b0bc26fa59bc20f26aa9fdf96d</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">110b3ae551d1c8984100b27ea147c565893a3fa1ee78a772c3d5aabcf39b1c47</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">1e41c9e790299524fc738ed67f19077846e40f9b34bb2a20f503ee9a3c62b327</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">248489491e8b84861185fbd04fc31501a9f97ce997b5cc87dad0cca031e4d7ae</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">81424deff8eeac94d3afa372b39c5ec08a03dfb470e5778e27494aaa614d9800</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">82284746310432ba47de1ae56065ced2d94f2b7128215c7f9a91bfc57995e5c3</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">85244d33a741ce49eb40232159d498dbdef6156a5977016e16b89c68b11fda84</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">86c9e48e0106fea2240e6390a4ad08f19ea3b62b69d78d4b10fa69b61d7885d3</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">8c0976a7a476065a4b743ec077098097cf5170fc8388740925956c72714ceb11</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b4541c32282e01c8777b10eb3444e28723e1dd358bafe555eda4f07692e823fe</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e6763340a3e8305ec10bf0db2f3e043b33dc0c6f54ad1952310247a78c658974</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.8.0.9-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ed54f2be4ba665667fd0300b47fc6b09cff7f041ddcabb033bab3b9fc5c8b202</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11043</id>
    <title>Moderate: python3.11-setuptools security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 08:02:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11043" id="RHSA-2025:11043" type="rhsa" title="RHSA-2025:11043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11043.html" id="ALSA-2025:11043" type="self" title="ALSA-2025:11043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="4.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-4.el8_10.src.rpm">
          <filename>python3.11-setuptools-65.5.1-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">6df6d59f2f9267b05ef9fd14a0944b97af787070de2a37ea0b3aebbac325a693</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11044</id>
    <title>Moderate: python3.12-setuptools security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 08:04:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11044" id="RHSA-2025:11044" type="rhsa" title="RHSA-2025:11044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11044.html" id="ALSA-2025:11044" type="self" title="ALSA-2025:11044"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="5.el8_10" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-5.el8_10.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">64612e0e5d89fbd540960000f37a0f318415f1797296b3d39297030f9dfac930</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11298</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-16 12:39:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: potential buffer overflow in handling symlinks (CVE-2022-49058)
  * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
  * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)
  * kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
  * kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
  * kernel: ext4: ignore xattrs past end (CVE-2025-37738)
  * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11298" id="RHSA-2025:11298" type="rhsa" title="RHSA-2025:11298"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49058" id="CVE-2022-49058" type="cve" title="CVE-2022-49058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49788" id="CVE-2022-49788" type="cve" title="CVE-2022-49788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57980" id="CVE-2024-57980" type="cve" title="CVE-2024-57980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-58002" id="CVE-2024-58002" type="cve" title="CVE-2024-58002"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21991" id="CVE-2025-21991" type="cve" title="CVE-2025-21991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22004" id="CVE-2025-22004" type="cve" title="CVE-2025-22004"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-23150" id="CVE-2025-23150" type="cve" title="CVE-2025-23150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37738" id="CVE-2025-37738" type="cve" title="CVE-2025-37738"/>
      <reference href="https://bugzilla.redhat.com/2348254" id="2348254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348513" id="2348513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348599" id="2348599" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356917" id="2356917" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357142" id="2357142" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363268" id="2363268" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363305" id="2363305" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363378" id="2363378" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11298.html" id="ALSA-2025:11298" type="self" title="ALSA-2025:11298"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.62.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.62.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.62.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">17420cc3e62e7a29b8069f5de16edf749cef7e66810f7c628c7209034741c6a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11327</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-17 08:13:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib2: Signal subscription vulnerabilities (CVE-2024-34397)
  * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
  * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11327" id="RHSA-2025:11327" type="rhsa" title="RHSA-2025:11327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4373" id="CVE-2025-4373" type="cve" title="CVE-2025-4373"/>
      <reference href="https://bugzilla.redhat.com/2279632" id="2279632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325340" id="2325340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2364265" id="2364265" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11327.html" id="ALSA-2025:11327" type="self" title="ALSA-2025:11327"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="glib2-static" version="2.56.4" release="166.el8_10" epoch="0" arch="aarch64" src="glib2-2.56.4-166.el8_10.src.rpm">
          <filename>glib2-static-2.56.4-166.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5662b73ff229d3190ff73b738311ca1b5e60a8823843933c4208228809925249</sum>
        </package>
        <package name="glib2-doc" version="2.56.4" release="166.el8_10" epoch="0" arch="noarch" src="glib2-2.56.4-166.el8_10.src.rpm">
          <filename>glib2-doc-2.56.4-166.el8_10.noarch.rpm</filename>
          <sum type="sha256">cd7b24af810ed5ff7814e409ed064913efea73f0690475989bc3286481715993</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11455</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-21 00:00:00"/>
    <updated date="2025-08-04 11:36:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: tcp/dccp: Don&amp;#39;t use timer_pending() in reqsk_queue_unlink(). (CVE-2024-50154)
  * kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11455" id="RHSA-2025:11455" type="rhsa" title="RHSA-2025:11455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50154" id="CVE-2024-50154" type="cve" title="CVE-2024-50154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38086" id="CVE-2025-38086" type="cve" title="CVE-2025-38086"/>
      <reference href="https://bugzilla.redhat.com/2324313" id="2324313" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375305" id="2375305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11455.html" id="ALSA-2025:11455" type="self" title="ALSA-2025:11455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.63.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.63.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.63.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">fe518590b15f2db826b70172eaa0b7c837b8d8760a3668c0f84e93f24fbe13ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11850</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-07-28 00:00:00"/>
    <updated date="2025-08-06 17:11:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  * kernel: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CVE-2025-21919)
  * kernel: ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CVE-2022-49977)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11850" id="RHSA-2025:11850" type="rhsa" title="RHSA-2025:11850"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49977" id="CVE-2022-49977" type="cve" title="CVE-2022-49977"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21905" id="CVE-2025-21905" type="cve" title="CVE-2025-21905"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21919" id="CVE-2025-21919" type="cve" title="CVE-2025-21919"/>
      <reference href="https://bugzilla.redhat.com/2356613" id="2356613" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2356618" id="2356618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373574" id="2373574" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11850.html" id="ALSA-2025:11850" type="self" title="ALSA-2025:11850"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.64.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.64.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.64.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c74d145f919618910842b9775ce133ff7b35ea6c34e681316e2f61ecddb7f053</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12527</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2026-04-09 14:57:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12527" id="RHSA-2025:12527" type="rhsa" title="RHSA-2025:12527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49133" id="CVE-2025-49133" type="cve" title="CVE-2025-49133"/>
      <reference href="https://bugzilla.redhat.com/2371585" id="2371585" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12527.html" id="ALSA-2025:12527" type="self" title="ALSA-2025:12527"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="aarch64" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">07a8050c7528e71c17f620c328bcb89bc9c0a4a4791d6035465b202685f2242f</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-53.module_el8.10.0+4031+06966654.4.aarch64.rpm</filename>
          <sum type="sha256">642dce48800d2fbbec8983b5061c7a1a5cd167077ae2fd4dff9cccbf39b171bd</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="aarch64" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">bcc9f65eb02413e9a06d3b6d52f9abb1ca36a40f36146760fcf1e6e92033732f</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1266</id>
    <title>Important: kernel security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-11 11:55:27"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CVE-2024-53104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1266" id="RHSA-2025:1266" type="rhsa" title="RHSA-2025:1266"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53104" id="CVE-2024-53104" type="cve" title="CVE-2024-53104"/>
      <reference href="https://bugzilla.redhat.com/2329817" id="2329817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1266.html" id="ALSA-2025:1266" type="self" title="ALSA-2025:1266"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.40.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.40.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.40.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ac1547db997e63a414bd0b3239550ca4afa1457f91d30a6e271806c92359c68f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12752</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2025-08-07 10:29:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928)
  * kernel: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CVE-2025-22020)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890)
  * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052)
  * kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
  * kernel: ext4: avoid resizing to a partial cluster size (CVE-2022-50020)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12752" id="RHSA-2025:12752" type="rhsa" title="RHSA-2025:12752"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50020" id="CVE-2022-50020" type="cve" title="CVE-2022-50020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21928" id="CVE-2025-21928" type="cve" title="CVE-2025-21928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22020" id="CVE-2025-22020" type="cve" title="CVE-2025-22020"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37890" id="CVE-2025-37890" type="cve" title="CVE-2025-37890"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38052" id="CVE-2025-38052" type="cve" title="CVE-2025-38052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38079" id="CVE-2025-38079" type="cve" title="CVE-2025-38079"/>
      <reference href="https://bugzilla.redhat.com/2356592" id="2356592" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360099" id="2360099" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366848" id="2366848" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373380" id="2373380" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373383" id="2373383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373630" id="2373630" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12752.html" id="ALSA-2025:12752" type="self" title="ALSA-2025:12752"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.66.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.66.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.66.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">bc7929eca8c25ae375d0013f9cba17426f8e5596b3c4aa8fed415837bd84e519</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12980</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-06 14:24:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Double free in glibc (CVE-2025-8058)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12980" id="RHSA-2025:12980" type="rhsa" title="RHSA-2025:12980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8058" id="CVE-2025-8058" type="cve" title="CVE-2025-8058"/>
      <reference href="https://bugzilla.redhat.com/2383146" id="2383146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12980.html" id="ALSA-2025:12980" type="self" title="ALSA-2025:12980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.25" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.25.aarch64.rpm</filename>
          <sum type="sha256">0637741844b6f83247b3e5d3fa87bf2b1ca7cde0d739b520b1891e2bfa28e879</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.25" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.25.aarch64.rpm</filename>
          <sum type="sha256">07d90c8406719347a2c99aeee743e16059524069a99968ca586122f0b2dd58f4</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.25" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.25.aarch64.rpm</filename>
          <sum type="sha256">68fc38d3b3d4fc60fff47eb0f121e134226742f6b26998056e5894fabbc432ea</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.25" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.25.aarch64.rpm</filename>
          <sum type="sha256">f92e2739c63ca62747e4d2b49cd729f04784d341123a06b4244d47df60633edc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1301</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-17 07:23:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1301" id="RHSA-2025:1301" type="rhsa" title="RHSA-2025:1301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1301.html" id="ALSA-2025:1301" type="self" title="ALSA-2025:1301"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="gcc-plugin-devel" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="aarch64" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-plugin-devel-8.5.0-23.el8_10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">61082680b846dfc259b8045109157b18d7c62a92b5797d00ddb65661af864d5f</sum>
        </package>
        <package name="libstdc++-static" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="aarch64" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>libstdc++-static-8.5.0-23.el8_10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">c16277dbf2f743b1e86467ee925e485230cf8aeb1880738f6d3addcf36e640c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1314</id>
    <title>Moderate: doxygen security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 11:23:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>doxygen security update</summary>
    <description>Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files.   

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1314" id="RHSA-2025:1314" type="rhsa" title="RHSA-2025:1314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1314.html" id="ALSA-2025:1314" type="self" title="ALSA-2025:1314"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="doxygen-latex" version="1.8.14" release="13.el8_10" epoch="1" arch="aarch64" src="doxygen-1.8.14-13.el8_10.src.rpm">
          <filename>doxygen-latex-1.8.14-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0c7ce52e863e1bd6d98d64afaca16b5d954d4da3e45f85b7460c5ba20f8c1e02</sum>
        </package>
        <package name="doxygen" version="1.8.14" release="13.el8_10" epoch="1" arch="aarch64" src="doxygen-1.8.14-13.el8_10.src.rpm">
          <filename>doxygen-1.8.14-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6adddd611b338f20cf1b2ee007248ec66d26cad7be5be215a33bbcd79d646aed</sum>
        </package>
        <package name="doxygen-doxywizard" version="1.8.14" release="13.el8_10" epoch="1" arch="aarch64" src="doxygen-1.8.14-13.el8_10.src.rpm">
          <filename>doxygen-doxywizard-1.8.14-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b80ebd026ea0fbb6aa73e404b350caa7ca40f997b86f7e04848011c668f2e51c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13315</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2025-08-07 00:00:00"/>
    <updated date="2025-08-07 09:27:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf (CVE-2025-7345)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13315" id="RHSA-2025:13315" type="rhsa" title="RHSA-2025:13315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7345" id="CVE-2025-7345" type="cve" title="CVE-2025-7345"/>
      <reference href="https://bugzilla.redhat.com/2377063" id="2377063" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13315.html" id="ALSA-2025:13315" type="self" title="ALSA-2025:13315"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="7.el8_10" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-7.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6dd86c026ff2af7188f6637b993ffe5611fbc4a8b7e282ff67f13b0c09a2e3cf</sum>
        </package>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="7.el8_10" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-7.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">cc629dce8d005e97865032cb839a94510f6614f949df76ba31ebd60faff91070</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13589</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-08-11 00:00:00"/>
    <updated date="2025-08-11 15:39:00"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
  * kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
  * kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)
  * kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
  * kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13589" id="RHSA-2025:13589" type="rhsa" title="RHSA-2025:13589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-47670" id="CVE-2021-47670" type="cve" title="CVE-2021-47670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21727" id="CVE-2025-21727" type="cve" title="CVE-2025-21727"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21759" id="CVE-2025-21759" type="cve" title="CVE-2025-21759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38085" id="CVE-2025-38085" type="cve" title="CVE-2025-38085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38159" id="CVE-2025-38159" type="cve" title="CVE-2025-38159"/>
      <reference href="https://bugzilla.redhat.com/2348516" id="2348516" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348596" id="2348596" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2360786" id="2360786" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2375304" id="2375304" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376064" id="2376064" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13589.html" id="ALSA-2025:13589" type="self" title="ALSA-2025:13589"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.69.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.69.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.69.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c7401328ed112290052de8672fa4c90dabcb859f3fc54cf86edb8bfbaab56030</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13960</id>
    <title>Important: kernel security update</title>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-18 11:22:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
  * kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
  * kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
  * kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13960" id="RHSA-2025:13960" type="rhsa" title="RHSA-2025:13960"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22097" id="CVE-2025-22097" type="cve" title="CVE-2025-22097"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37914" id="CVE-2025-37914" type="cve" title="CVE-2025-37914"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38250" id="CVE-2025-38250" type="cve" title="CVE-2025-38250"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38380" id="CVE-2025-38380" type="cve" title="CVE-2025-38380"/>
      <reference href="https://bugzilla.redhat.com/2360223" id="2360223" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367500" id="2367500" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378982" id="2378982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383381" id="2383381" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13960.html" id="ALSA-2025:13960" type="self" title="ALSA-2025:13960"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.70.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.70.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.70.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e9103c7bdc9f176eb7872121959b0a661043f09e80a7b64a374798b7b365107d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14101</id>
    <title>Important: mingw-sqlite security update</title>
    <issued date="2025-08-19 00:00:00"/>
    <updated date="2025-08-20 12:24:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Version 2 and version 3 binaries are named to permit each to be installed on a single host This package contains cross-compiled libraries and development tools for Windows.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14101" id="RHSA-2025:14101" type="rhsa" title="RHSA-2025:14101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14101.html" id="ALSA-2025:14101" type="self" title="ALSA-2025:14101"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw32-sqlite-static" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw32-sqlite-static-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">7323fb9f9e1d8d21a3d5620a81ca2ecab439109fa488410977b587247e50886a</sum>
        </package>
        <package name="mingw64-sqlite" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw64-sqlite-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">978019774a040c094a8e4f831a7eb3e95b7a10b064c8bbd7d90a8192a74f78d2</sum>
        </package>
        <package name="mingw64-sqlite-static" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw64-sqlite-static-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">a37c7a190566005606b0e93d38d77c08f45b5fc99a07ecfa4e20e3fcbc71c934</sum>
        </package>
        <package name="mingw32-sqlite" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw32-sqlite-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">ec826a4ee6bd5fd099baeab1442cc4544d8b9ac86a69c6339f4fcaaa7439e5dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14135</id>
    <title>Important: libarchive security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-21 05:47:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14135" id="RHSA-2025:14135" type="rhsa" title="RHSA-2025:14135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5914" id="CVE-2025-5914" type="cve" title="CVE-2025-5914"/>
      <reference href="https://bugzilla.redhat.com/2370861" id="2370861" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14135.html" id="ALSA-2025:14135" type="self" title="ALSA-2025:14135"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libarchive-devel" version="3.3.3" release="6.el8_10" epoch="0" arch="aarch64" src="libarchive-3.3.3-6.el8_10.src.rpm">
          <filename>libarchive-devel-3.3.3-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">017faa4aac7556f514fb65ed0d2b58c07437374eb52e90497877b687530d03f3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14438</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-08-25 00:00:00"/>
    <updated date="2025-09-02 10:11:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
  * kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14438" id="RHSA-2025:14438" type="rhsa" title="RHSA-2025:14438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22058" id="CVE-2025-22058" type="cve" title="CVE-2025-22058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38200" id="CVE-2025-38200" type="cve" title="CVE-2025-38200"/>
      <reference href="https://bugzilla.redhat.com/2360276" id="2360276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2376392" id="2376392" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14438.html" id="ALSA-2025:14438" type="self" title="ALSA-2025:14438"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.71.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.71.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.71.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d0a35f535fcbbb5149e74a528698dbf5cc2832d42f8d1ed68f1ef54e6378d352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14546</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-09-04 09:38:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14546" id="RHSA-2025:14546" type="rhsa" title="RHSA-2025:14546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14546.html" id="ALSA-2025:14546" type="self" title="ALSA-2025:14546"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.11" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.11-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">04aef90f5f03f702f382447fd5911170bce5b43c698c72f8c9a3eaaf972c16ba</sum>
        </package>
        <package name="python3.12-debug" version="3.12.11" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.11-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0d8297be33d96ad5fc52c3b82880e5e28f3b23a5e15bccdcf6c7bc71d817ee8b</sum>
        </package>
        <package name="python3.12-idle" version="3.12.11" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.11-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">66cd0b5d22469c1c0693ffceac80755dbe35d80966fd89fae38573edf7a321cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14841</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 06:51:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14841" id="RHSA-2025:14841" type="rhsa" title="RHSA-2025:14841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14841.html" id="ALSA-2025:14841" type="self" title="ALSA-2025:14841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.13" release="2.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c0ad909eab05d5dd39e48fc4460a9b1e381f2700e2213bdeedb7946e72e60a71</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="2.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d0e5dbfd72dca2f4be5107fbabad6928b1ade4a2a53df1de571ee19535b4b59f</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="2.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e7b7e81bff8169560a1349d5168e590aca8839ceea12a4f3e6d55c4e00de910f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14900</id>
    <title>Moderate: python39:3.9 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-09-01 12:34:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)
  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14900" id="RHSA-2025:14900" type="rhsa" title="RHSA-2025:14900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14900.html" id="ALSA-2025:14900" type="self" title="ALSA-2025:14900"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020250829123218" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-debug" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="aarch64" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-debug-3.9.20-2.module_el8.10.0+4040+9207bbc0.aarch64.rpm</filename>
          <sum type="sha256">7bee47170cb8ef2855184391fba88016db480c8bda39542d665f6794f6a8d8ba</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15008</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-09 09:28:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
  * kernel: scsi: lpfc: Use memcpy() for BIOS version (CVE-2025-38332)
  * kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
  * kernel: net/sched: sch_qfq: Fix race condition on qfq_aggregate (CVE-2025-38477)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15008" id="RHSA-2025:15008" type="rhsa" title="RHSA-2025:15008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38211" id="CVE-2025-38211" type="cve" title="CVE-2025-38211"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38332" id="CVE-2025-38332" type="cve" title="CVE-2025-38332"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38464" id="CVE-2025-38464" type="cve" title="CVE-2025-38464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38477" id="CVE-2025-38477" type="cve" title="CVE-2025-38477"/>
      <reference href="https://bugzilla.redhat.com/2376406" id="2376406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2379246" id="2379246" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383509" id="2383509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383922" id="2383922" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15008.html" id="ALSA-2025:15008" type="self" title="ALSA-2025:15008"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.72.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.72.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.72.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ca4c60732524e7b4550c8f3abdd7fb0513f1d30ae0719ee1f500717d91273a9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15017</id>
    <title>Important: udisks2 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:15:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>udisks2 security update</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.  

Security Fix(es):  

  * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15017" id="RHSA-2025:15017" type="rhsa" title="RHSA-2025:15017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8067" id="CVE-2025-8067" type="cve" title="CVE-2025-8067"/>
      <reference href="https://bugzilla.redhat.com/2388623" id="2388623" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15017.html" id="ALSA-2025:15017" type="self" title="ALSA-2025:15017"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libudisks2-devel" version="2.9.0" release="16.el8_10.1" epoch="0" arch="aarch64" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>libudisks2-devel-2.9.0-16.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">b85caca42000a6b148cb5afe972d3a37d823dced116277532ae9920f48ad070f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15471</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-08 00:00:00"/>
    <updated date="2025-09-09 09:32:05"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: bpf: Don't use tnum_range on array range checking for poke descriptors (CVE-2022-49985)
  * kernel: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CVE-2025-38352)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15471" id="RHSA-2025:15471" type="rhsa" title="RHSA-2025:15471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49985" id="CVE-2022-49985" type="cve" title="CVE-2022-49985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38352" id="CVE-2025-38352" type="cve" title="CVE-2025-38352"/>
      <reference href="https://bugzilla.redhat.com/2373540" id="2373540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382581" id="2382581" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15471.html" id="ALSA-2025:15471" type="self" title="ALSA-2025:15471"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.74.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.74.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.74.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">8e7d458fe6a5dca3c1063c46b88ad7e450cb8025258a8c2f519d1fdbb44d3224</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15785</id>
    <title>Important: kernel security update</title>
    <issued date="2025-09-15 00:00:00"/>
    <updated date="2025-09-23 12:05:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net: usb: smsc75xx: Limit packet length to skb-&gt;len (CVE-2023-53125)
  * kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  * kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)
  * kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15785" id="RHSA-2025:15785" type="rhsa" title="RHSA-2025:15785"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53125" id="CVE-2023-53125" type="cve" title="CVE-2023-53125"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38350" id="CVE-2025-38350" type="cve" title="CVE-2025-38350"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38392" id="CVE-2025-38392" type="cve" title="CVE-2025-38392"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38449" id="CVE-2025-38449" type="cve" title="CVE-2025-38449"/>
      <reference href="https://bugzilla.redhat.com/2363686" id="2363686" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2382054" id="2382054" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383407" id="2383407" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383519" id="2383519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15785.html" id="ALSA-2025:15785" type="self" title="ALSA-2025:15785"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.75.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.75.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.75.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">83bc03d101483a87b554a4110749d34045662772ab1c69a937db3c7bda85d921</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16372</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-22 00:00:00"/>
    <updated date="2025-09-24 11:03:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
  * kernel: do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498)
  * kernel: HID: core: Harden s32ton() against conversion to 0 bits (CVE-2025-38556)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16372" id="RHSA-2025:16372" type="rhsa" title="RHSA-2025:16372"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38461" id="CVE-2025-38461" type="cve" title="CVE-2025-38461"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38498" id="CVE-2025-38498" type="cve" title="CVE-2025-38498"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38556" id="CVE-2025-38556" type="cve" title="CVE-2025-38556"/>
      <reference href="https://bugzilla.redhat.com/2383513" id="2383513" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384422" id="2384422" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2389456" id="2389456" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-16372.html" id="ALSA-2025:16372" type="self" title="ALSA-2025:16372"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.76.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.76.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.76.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">58b51c7129de1771001f3dd3c8d58e80659df910a1924332ee35500d95e4ff54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1676</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 11:18:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1676" id="RHSA-2025:1676" type="rhsa" title="RHSA-2025:1676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1676.html" id="ALSA-2025:1676" type="self" title="ALSA-2025:1676"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">3c6eb59fca20e0db368692c90011ea1e32b85dc992610219c16902ba47035807</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">6474ce4336d73b99e38bfc6fe8e03b94f8583a72b9219a71456f817cb86aa4f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:16919</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-09-29 00:00:00"/>
    <updated date="2025-10-01 09:27:51"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  * kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  * kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  * kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:16919" id="RHSA-2025:16919" type="rhsa" title="RHSA-2025:16919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50087" id="CVE-2022-50087" type="cve" title="CVE-2022-50087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-22026" id="CVE-2025-22026" type="cve" title="CVE-2025-22026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-37797" id="CVE-2025-37797" type="cve" title="CVE-2025-37797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38718" id="CVE-2025-38718" type="cve" title="CVE-2025-38718"/>
      <reference href="https://bugzilla.redhat.com/2360224" id="2360224" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2363672" id="2363672" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373539" id="2373539" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393166" id="2393166" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-16919.html" id="ALSA-2025:16919" type="self" title="ALSA-2025:16919"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.77.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.77.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.77.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f6ad3aaabc4330df77246fed77a5a55051831c53c18dafa14e8a01f49d1b0f5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17163</id>
    <title>Moderate: perl-JSON-XS security update</title>
    <issued date="2025-10-01 00:00:00"/>
    <updated date="2025-10-20 12:34:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-JSON-XS security update</summary>
    <description>This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.  

Security Fix(es):  

  * JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17163" id="RHSA-2025:17163" type="rhsa" title="RHSA-2025:17163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40928" id="CVE-2025-40928" type="cve" title="CVE-2025-40928"/>
      <reference href="https://bugzilla.redhat.com/2393878" id="2393878" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17163.html" id="ALSA-2025:17163" type="self" title="ALSA-2025:17163"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="perl-JSON-XS" version="3.04" release="4.el8_10" epoch="1" arch="aarch64" src="perl-JSON-XS-3.04-4.el8_10.src.rpm">
          <filename>perl-JSON-XS-3.04-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f712fdc5602d73257afefa68a178ca5186315f25563c323513a7dcb639e5a404</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17397</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-06 00:00:00"/>
    <updated date="2025-10-08 10:23:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
  * kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17397" id="RHSA-2025:17397" type="rhsa" title="RHSA-2025:17397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38527" id="CVE-2025-38527" type="cve" title="CVE-2025-38527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39730" id="CVE-2025-39730" type="cve" title="CVE-2025-39730"/>
      <reference href="https://bugzilla.redhat.com/2388928" id="2388928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2393731" id="2393731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17397.html" id="ALSA-2025:17397" type="self" title="ALSA-2025:17397"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.78.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.78.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.78.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c15a842eee249a30dd997527375c9aff3f37cac043e05f5ab96a7a400ba69c57</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17797</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-13 00:00:00"/>
    <updated date="2025-10-14 10:14:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228)
  * kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17797" id="RHSA-2025:17797" type="rhsa" title="RHSA-2025:17797"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50228" id="CVE-2022-50228" type="cve" title="CVE-2022-50228"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53305" id="CVE-2023-53305" type="cve" title="CVE-2023-53305"/>
      <reference href="https://bugzilla.redhat.com/2373529" id="2373529" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395858" id="2395858" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17797.html" id="ALSA-2025:17797" type="self" title="ALSA-2025:17797"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.79.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.79.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.79.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2c396bf7ae2978352824b1ea5ec2dff310d3859d0448b2c2409709e570654b2f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18148</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-20 12:10:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18148" id="RHSA-2025:18148" type="rhsa" title="RHSA-2025:18148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18148.html" id="ALSA-2025:18148" type="self" title="ALSA-2025:18148"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.121" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.121-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">87d8137d95b62aed437c2b12d0fd9c7112ec7dcf91037b4854acb02e030fee04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18150</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-11-03 08:55:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18150" id="RHSA-2025:18150" type="rhsa" title="RHSA-2025:18150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18150.html" id="ALSA-2025:18150" type="self" title="ALSA-2025:18150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.111" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.111-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2bbaf93b465b2457ee552f29c6daa82d29700a4a5300a4e24dc5ee0414a75f5f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18297</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-20 12:01:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
  * kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CVE-2025-39751)
  * kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18297" id="RHSA-2025:18297" type="rhsa" title="RHSA-2025:18297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53373" id="CVE-2023-53373" type="cve" title="CVE-2023-53373"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39751" id="CVE-2025-39751" type="cve" title="CVE-2025-39751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39757" id="CVE-2025-39757" type="cve" title="CVE-2025-39757"/>
      <reference href="https://bugzilla.redhat.com/2394615" id="2394615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394624" id="2394624" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396379" id="2396379" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18297.html" id="ALSA-2025:18297" type="self" title="ALSA-2025:18297"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.80.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.80.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.80.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b5c8beeb61526852f4f734531b6518484e8714ef6601b40e8c31d8d0b21dfaac</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18815</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 12:06:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 8 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.2, 8.4, 8.6, and 9.0. On AlmaLinux systems, this means that OpenJDK's FIPS mode will now be enabled by default when the system is in FIPS mode. To revert to the previous behaviour, use -Dcom.AlmaLinux.fips=false (AlmaLinux-118777, AlmaLinux-118778, AlmaLinux-118779, AlmaLinux-118782)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18815" id="RHSA-2025:18815" type="rhsa" title="RHSA-2025:18815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18815.html" id="ALSA-2025:18815" type="self" title="ALSA-2025:18815"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0961dbd6992c9463f1c4a812f3268f9d52dae2cf6cc9523f4f3ec5403f537641</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">1269e1af54ac51029380c1dbd47ba32246192952353a361430d6f8578648e993</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">135570c6bac256e729d75b908757f22982f43cb43b4e275a432113913e334ace</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">194ecefdec471770503553bc844f58c67fba0311cfb0eb51bb43a871c15a40a5</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">1a60df5cbecf484c4429e5e80f33fa901efb6a5f70783ac8694aed86fd09a0fb</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">36b5711ec06b7f77081afdaf263058b8a4c88cb2504691c780cd003bce6b671e</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">3bb1df4ced9f78d0cfc5c65d4c10878896844064cf59be5a74d390e1a9e1c63e</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">73a79bb052d0a2feb0547173956bcab3badca520f0bf9c9214e7082818a5acd9</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b0346d96858ced28883bad403c43441f9bf4521a5fc4cc6dfa97fd2cf3e55259</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b4f22b94718a4183cb24d0826f6bea38aa7b601a94ffd32aa6be90746955c407</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">bff3791309faf62e0677ecfbdd1eb4933b012459de5d139c4bbd9f2fb5dbd1af</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.472.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.472.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.472.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">d2d3736518dbe228f4029e4ae9548fb012ee159724feb87bc4eb754e12aaa415</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18821</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:28:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18821" id="RHSA-2025:18821" type="rhsa" title="RHSA-2025:18821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18821.html" id="ALSA-2025:18821" type="self" title="ALSA-2025:18821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0551ff5b05e123c0fd6d14dadb0647ae6c41e1f87d5111fff4b27158f04d99ea</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0f771e992fb20066faa9b34f806638173522e566025a1cf61578a9da6455a28c</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2331259d8984a9eff3d4abb9eef543ffecb3133b3ef828b8ab7a7919dc7bd7f7</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6289656544be8601a336e924a857908fa2ee045592f4d59073ac20298859dc1b</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6af00f672db728c7c271c141e284cb4a3b1905f766dd2183068dfb75d87d7877</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6b19725bb73ed9a6d832f191937668e66619fda5715c996c8dfa88d35b1a7693</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">788077b6d570ee8f1dc63648b488eb75f6f3ec4c3b6087a9b4b1c263939665e8</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">820a7784521bb35a7551ed4bb8ff72f1a697cbc322ff65b69ccc1b562be49888</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">838abf552a24fb498de30bb4db09981896e2d11ab1878786a6d8229231b39d1f</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">a03bd14b2aeb07fc246ad6b60c5dee9da8c8adb67e749d916219d8609dcda19f</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">aaccb904360742b720346c36dccc7daf1402451896bfcb4a251e22564bb9b1f7</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c3ce2985a74adb174a7c0a0da1b8937b6fe7ae22581a82e2b4a86dac1925f724</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">caca8daa3544689e42ab0459167c93105e91bc231cb0564a2f525b74b34c77b3</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.17.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e9d583e6c7f2efb93bab1e08b644c3cb85dce8a7303c9a10d64015ce5038a681</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18824</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:18:58"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)
  * JDK: Enhance String Handling (CVE-2025-61748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18824" id="RHSA-2025:18824" type="rhsa" title="RHSA-2025:18824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61748" id="CVE-2025-61748" type="cve" title="CVE-2025-61748"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18824.html" id="ALSA-2025:18824" type="self" title="ALSA-2025:18824"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">04206d1a9d315c01d980b285cb1eb5cedaf063e91e178928ce42f88d48ce0fc2</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0736387b79821c4d52f90dd9b7129fce9d521d7e7670c23dc45c42fd43270cda</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0b3abc71e7dd0286a679ad79dae90548adebfe51aeddc7c7c4b54f9ee83fe32c</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">21897caf2def2416da7fdd001e1a76802bd190a553141e3613229a3fdb0f9b57</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">220caa3fb0b69447b00d31da5253b46036ad4922f16d24ea8ab19c13ece119b4</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">342816cde13921ab57504d4d9ef9cc002766018d438cba31aad756ab0245a7f1</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">473c5d0c402ec5640e61db211249a5ead7f41e1bbd9106e2e39682a91336d9b9</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6bdef0a682fade5c7c29db42276febdf3402534bf17dcaa67f0be6a8134e1c37</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">887f525e23f7db2da040ab1c88b2154d6599d5cd8abafa242ae2aff1895b8d55</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b6adcc76888ef4d04e563ef1243d4da1f2dd36c9ab78763b0b9040ac71c67f10</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">b740a03426e1fe7711bd5af366a58699f8b212bc23dd044085f3275161c2d376</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c18744c0c00fc7dadc38b0e0e2ad6a1ba20568a2e3fc32b9791b322acf848bd7</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">d36557816acb26e2bf128e4f0616649be7f16ad754b0499d55539f42ee9fb4ab</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.9.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">eebe8879c273d07e7222062f2a51f44c4c367cc9ed1a1d450cd1f2db0033052b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19102</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-10-27 00:00:00"/>
    <updated date="2025-10-28 07:55:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CVE-2023-53297)
  * kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
  * kernel: Bluetooth: Fix potential use-after-free when clear keys (CVE-2023-53386)
  * kernel: Bluetooth: L2CAP: Fix user-after-free (CVE-2022-50386)
  * kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
  * kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19102" id="RHSA-2025:19102" type="rhsa" title="RHSA-2025:19102"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50386" id="CVE-2022-50386" type="cve" title="CVE-2022-50386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53297" id="CVE-2023-53297" type="cve" title="CVE-2023-53297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53386" id="CVE-2023-53386" type="cve" title="CVE-2023-53386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39817" id="CVE-2025-39817" type="cve" title="CVE-2025-39817"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39841" id="CVE-2025-39841" type="cve" title="CVE-2025-39841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39849" id="CVE-2025-39849" type="cve" title="CVE-2025-39849"/>
      <reference href="https://bugzilla.redhat.com/2395681" id="2395681" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395805" id="2395805" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396419" id="2396419" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396431" id="2396431" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396928" id="2396928" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396944" id="2396944" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19102.html" id="ALSA-2025:19102" type="self" title="ALSA-2025:19102"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.81.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.81.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.81.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">368498fc0c3885f4e1ee46527d7b23abbcfd3ed306509efd733247b94ac0e550</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19276</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-10-29 00:00:00"/>
    <updated date="2025-10-31 08:23:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19276" id="RHSA-2025:19276" type="rhsa" title="RHSA-2025:19276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19276.html" id="ALSA-2025:19276" type="self" title="ALSA-2025:19276"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="35.el8_10" epoch="0" arch="aarch64" src="libtiff-4.0.9-35.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-35.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d9746d8bbecef1d9b364cdadbe66332f370216f8bee9caf74d94a39495bc9a69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19434</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2026-01-05 21:05:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19434" id="RHSA-2025:19434" type="rhsa" title="RHSA-2025:19434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19434.html" id="ALSA-2025:19434" type="self" title="ALSA-2025:19434"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="27.el8_10" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-27.el8_10.aarch64.rpm</filename>
          <sum type="sha256">707e8da88096b13e4dc82482ddf5bb3aa5762034517abece111eb2d0b2498b23</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="27.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-27.el8_10.noarch.rpm</filename>
          <sum type="sha256">8b68ad08bfe54bac581b29ef622bada1357a6f2b1647c8c5c778e55aa6120328</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19447</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2025-11-07 10:49:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: wifi: mac80211: check S1G action frame size (CVE-2023-53257)
  * kernel: wifi: mwifiex: Fix OOB and integer underflow when rx packets (CVE-2023-53226)
  * kernel: wifi: cfg80211: fix use-after-free in cmp_bss() (CVE-2025-39864)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19447" id="RHSA-2025:19447" type="rhsa" title="RHSA-2025:19447"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53226" id="CVE-2023-53226" type="cve" title="CVE-2023-53226"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53257" id="CVE-2023-53257" type="cve" title="CVE-2023-53257"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39864" id="CVE-2025-39864" type="cve" title="CVE-2025-39864"/>
      <reference href="https://bugzilla.redhat.com/2395253" id="2395253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395420" id="2395420" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396934" id="2396934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19447.html" id="ALSA-2025:19447" type="self" title="ALSA-2025:19447"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.82.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.82.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.82.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d81ae0c342236007bf531d6c5e8b53c79d50d39009db7a77a3902903e50596c9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19610</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 09:12:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19610" id="RHSA-2025:19610" type="rhsa" title="RHSA-2025:19610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19610.html" id="ALSA-2025:19610" type="self" title="ALSA-2025:19610"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.4" release="5.el8_10.3" epoch="0" arch="aarch64" src="sssd-2.9.4-5.el8_10.3.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-5.el8_10.3.aarch64.rpm</filename>
          <sum type="sha256">6c61ec5877c2a102f848c0a5f589729f7c0bf1d6b78c515a280acff8d02f6534</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19793</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2025-11-05 00:00:00"/>
    <updated date="2025-11-07 08:06:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19793" id="RHSA-2025:19793" type="rhsa" title="RHSA-2025:19793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19793.html" id="ALSA-2025:19793" type="self" title="ALSA-2025:19793"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">4bdbb98cccc6fce8e5a1768731bbc866608c3ed4edcd04311512f61540233cbe</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.4.aarch64.rpm</filename>
          <sum type="sha256">6499a27e884f3985615e5c1b839b4bfc9c6d5cb274209650080949c7a1414ef5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19906</id>
    <title>Important: mingw-libtiff security update</title>
    <issued date="2025-11-06 00:00:00"/>
    <updated date="2025-11-07 13:28:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-libtiff security update</summary>
    <description>The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19906" id="RHSA-2025:19906" type="rhsa" title="RHSA-2025:19906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19906.html" id="ALSA-2025:19906" type="self" title="ALSA-2025:19906"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw32-libtiff-static" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw32-libtiff-static-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">5cf075fe8cc92a6739b592c63f76da75791eb194d8f5ce3c1d4d8c5c962f1f49</sum>
        </package>
        <package name="mingw32-libtiff" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw32-libtiff-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">7a10ae15a755902afe8304eb53b8894f0754a9f2174c9bdf0af2efb0c115e3cf</sum>
        </package>
        <package name="mingw64-libtiff-static" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw64-libtiff-static-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">82e574e73a6cdcff6673fbc675e7e887a089bfb39fcb7ef7d858fea74b7fc816</sum>
        </package>
        <package name="mingw64-libtiff" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw64-libtiff-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">cfe615c289127f7a88ccf0a681064865ef14aa0395b13642395c16dfb96e69eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19931</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-11 14:31:31"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: x86/vmscape: Add conditional IBPB mitigation (CVE-2025-40300)
  * kernel: mm: fix zswap writeback race condition (CVE-2023-53178)
  * kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy (CVE-2022-50367)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19931" id="RHSA-2025:19931" type="rhsa" title="RHSA-2025:19931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50367" id="CVE-2022-50367" type="cve" title="CVE-2022-50367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53178" id="CVE-2023-53178" type="cve" title="CVE-2023-53178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40300" id="CVE-2025-40300" type="cve" title="CVE-2025-40300"/>
      <reference href="https://bugzilla.redhat.com/2394627" id="2394627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395358" id="2395358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2396114" id="2396114" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19931.html" id="ALSA-2025:19931" type="self" title="ALSA-2025:19931"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.83.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.83.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.83.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0785e2547cd64cd66c80c61e6de18626bbe160a5c3a667508c040abe71af2580</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20034</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-11 12:31:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20034" id="RHSA-2025:20034" type="rhsa" title="RHSA-2025:20034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-20034.html" id="ALSA-2025:20034" type="self" title="ALSA-2025:20034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="36.el8_10" epoch="0" arch="aarch64" src="libtiff-4.0.9-36.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-36.el8_10.aarch64.rpm</filename>
          <sum type="sha256">36ff24860d6515aa2d83cb94449428c4cdf0d0390c46725b853c8ef5db1180f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21398</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-17 00:00:00"/>
    <updated date="2025-11-19 14:49:12"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock/virtio: Validate length in packet header before skb_put() (CVE-2025-39718)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21398" id="RHSA-2025:21398" type="rhsa" title="RHSA-2025:21398"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39718" id="CVE-2025-39718" type="cve" title="CVE-2025-39718"/>
      <reference href="https://bugzilla.redhat.com/2393507" id="2393507" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21398.html" id="ALSA-2025:21398" type="self" title="ALSA-2025:21398"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.84.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.84.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.84.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3177f67dc209496f9c74d98c877ff4b36dd72c104fe25f3fa9860ac8cfe101fa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21628</id>
    <title>Critical: lasso security update</title>
    <issued date="2025-11-17 00:00:00"/>
    <updated date="2025-11-19 10:11:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>lasso security update</summary>
    <description>The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.  

Security Fix(es):  

  * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21628" id="RHSA-2025:21628" type="rhsa" title="RHSA-2025:21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47151" id="CVE-2025-47151" type="cve" title="CVE-2025-47151"/>
      <reference href="https://bugzilla.redhat.com/2412739" id="2412739" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21628.html" id="ALSA-2025:21628" type="self" title="ALSA-2025:21628"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="lasso-devel" version="2.6.0" release="14.el8_10" epoch="0" arch="aarch64" src="lasso-2.6.0-14.el8_10.src.rpm">
          <filename>lasso-devel-2.6.0-14.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ac859ab039e29a57e71b1ec4eb1cf59cbce5757533525a8c8ffea767440cdbc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21917</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-11-25 09:27:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: NFS: Fix a race when updating an existing write (CVE-2025-39697)
  * kernel: i40e: fix idx validation in config queues msg (CVE-2025-39971)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21917" id="RHSA-2025:21917" type="rhsa" title="RHSA-2025:21917"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39697" id="CVE-2025-39697" type="cve" title="CVE-2025-39697"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39971" id="CVE-2025-39971" type="cve" title="CVE-2025-39971"/>
      <reference href="https://bugzilla.redhat.com/2393481" id="2393481" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2404108" id="2404108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21917.html" id="ALSA-2025:21917" type="self" title="ALSA-2025:21917"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.85.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.85.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.85.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">71988985951aaa39bb2995e92536acc2987fb73086e5b1ba21dae8865dbf1805</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21974</id>
    <title>Important: mingw-expat security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-01 07:55:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-expat security update</summary>
    <description>Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW.   

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21974" id="RHSA-2025:21974" type="rhsa" title="RHSA-2025:21974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21974.html" id="ALSA-2025:21974" type="self" title="ALSA-2025:21974"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw32-expat" version="2.5.0" release="1.el8_10" epoch="0" arch="noarch" src="mingw-expat-2.5.0-1.el8_10.src.rpm">
          <filename>mingw32-expat-2.5.0-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">2ba234b8ca9964afd438ce2fea53efad99e8c94a4b49aca5802789f500cc9d10</sum>
        </package>
        <package name="mingw64-expat" version="2.5.0" release="1.el8_10" epoch="0" arch="noarch" src="mingw-expat-2.5.0-1.el8_10.src.rpm">
          <filename>mingw64-expat-2.5.0-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3fd086856eb4851f1782df7a68359e23644b631f26b1ab3556610f4b8cd7956e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22388</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-03 11:58:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  * kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
  * kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  * kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  * kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)
  * kernel: tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect() (CVE-2025-39955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22388" id="RHSA-2025:22388" type="rhsa" title="RHSA-2025:22388"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53513" id="CVE-2023-53513" type="cve" title="CVE-2023-53513"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38724" id="CVE-2025-38724" type="cve" title="CVE-2025-38724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39825" id="CVE-2025-39825" type="cve" title="CVE-2025-39825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39883" id="CVE-2025-39883" type="cve" title="CVE-2025-39883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39898" id="CVE-2025-39898" type="cve" title="CVE-2025-39898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39955" id="CVE-2025-39955" type="cve" title="CVE-2025-39955"/>
      <reference href="https://bugzilla.redhat.com/2393172" id="2393172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2395792" id="2395792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2397553" id="2397553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400598" id="2400598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2400795" id="2400795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402699" id="2402699" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22388.html" id="ALSA-2025:22388" type="self" title="ALSA-2025:22388"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.87.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.87.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.87.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ef1b4e48aab71535beb6459cf32fc4e6664aa4b0795e615f1db6c9b15e504ca8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:22801</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-12-08 00:00:00"/>
    <updated date="2025-12-08 13:53:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (CVE-2023-53401)
  * kernel: RDMA/rxe: Fix incomplete state save in rxe_requester (CVE-2023-53539)
  * kernel: RDMA/rxe: Fix mr-&gt;map double free (CVE-2022-50543)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:22801" id="RHSA-2025:22801" type="rhsa" title="RHSA-2025:22801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50543" id="CVE-2022-50543" type="cve" title="CVE-2022-50543"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53401" id="CVE-2023-53401" type="cve" title="CVE-2023-53401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53539" id="CVE-2023-53539" type="cve" title="CVE-2023-53539"/>
      <reference href="https://bugzilla.redhat.com/2396417" id="2396417" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401510" id="2401510" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402222" id="2402222" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-22801.html" id="ALSA-2025:22801" type="self" title="ALSA-2025:22801"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.89.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.89.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.89.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">69fc747626af09be21de88a4da56ddf56c8a4ee518e6d69eda72fb0035698617</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23530</id>
    <title>Important: python39:3.9 security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-22 14:09:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)
  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)
  * cpython: python: CPython DecodeError Handling Vulnerability (CVE-2025-4516)
  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)
  * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23530" id="RHSA-2025:23530" type="rhsa" title="RHSA-2025:23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5642" id="CVE-2024-5642" type="cve" title="CVE-2024-5642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4516" id="CVE-2025-4516" type="cve" title="CVE-2025-4516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6069" id="CVE-2025-6069" type="cve" title="CVE-2025-6069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2294682" id="2294682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366509" id="2366509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373234" id="2373234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23530.html" id="ALSA-2025:23530" type="self" title="ALSA-2025:23530"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020251218093243" context="0a5380d9" arch="aarch64"/>
        <package name="python39-py" version="1.10.0" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-py-1.10.0-1.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">31ad3684d951066c0e5ca1adf44adfbe92fca7f11d24d699bf02826453774740</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">42761a0cfb0be0a90deddd9eca2fb7ec4e25647582a1ef145388f3b445212f68</sum>
        </package>
        <package name="python39-attrs" version="20.3.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-attrs-20.3.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">4d269a3a0b944d45bf1d2f564ce3b4ce62bf8cb0b5b7a65f48bfbdb51aa71007</sum>
        </package>
        <package name="python39-iniconfig" version="1.1.1" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-iniconfig-1.1.1-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">5cccc5f894ea3b17b1df5e99bb99b855809949fdf7f8f3e061fa2631e61fb0ca</sum>
        </package>
        <package name="python39-pluggy" version="0.13.1" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pluggy-0.13.1-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">602d3fec2dc67b10e92a29b74ddfc51f4c10fbad43ce30a9ada32ff6ee51c418</sum>
        </package>
        <package name="python39-more-itertools" version="8.5.0" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-more-itertools-8.5.0-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">60ea4b7acf684a487e9ffc2bc74041664231abd6cc8fc28ad48c70ffc0e27d74</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">7cf9365f247ba4b04d753924adb0b0ff680fb2db4fbcb16d8a28078b3433fec8</sum>
        </package>
        <package name="python39-packaging" version="20.4" release="4.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-packaging-20.4-4.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">9b63b5835997d76ab33ce36967c3343760cf8bb214c80a8f5293295bd1610b8e</sum>
        </package>
        <package name="python39-debug" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="aarch64" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-debug-3.9.25-2.module_el8.10.0+4083+53cad1fb.aarch64.rpm</filename>
          <sum type="sha256">9d6976181d3fe3ef9466535beb11795547238f8b3a843d58e899ee99a952497f</sum>
        </package>
        <package name="python39-wcwidth" version="0.2.5" release="3.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-wcwidth-0.2.5-3.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">b9980a6271bea04e8c9d539f0eeb20bdf5136d9b935c76c7bf3230c7ac98b72b</sum>
        </package>
        <package name="python39-pytest" version="6.0.2" release="2.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pytest-6.0.2-2.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">d6d1c9fd2ac0f9ba54380b3e7f3ddf2011b42ba33b109cfffc5b70a18d4b158a</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+2780+a40f65e1" epoch="0" arch="aarch64" src="pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+2780+a40f65e1.aarch64.rpm</filename>
          <sum type="sha256">f7e22c1631d14b4d73fd7b2735e76f2c571a083d33667ea9c1087370aa455773</sum>
        </package>
        <package name="python39-pyparsing" version="2.4.7" release="5.module_el8.6.0+2780+a40f65e1" epoch="0" arch="noarch" src="python3x-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.src.rpm">
          <filename>python39-pyparsing-2.4.7-5.module_el8.6.0+2780+a40f65e1.noarch.rpm</filename>
          <sum type="sha256">f9013127699823e76dc190f97809045e6b455fcdd5a7e4fa95d947c7888a3111</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2473</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-10 00:00:00"/>
    <updated date="2025-03-11 12:09:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: HID: core: zero-initialize the report buffer (CVE-2024-50302)
  * kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (CVE-2024-53197)
  * kernel: scsi: megaraid_sas: Fix for a potential deadlock (CVE-2024-57807)
  * kernel: pps: Fix a use-after-free (CVE-2024-57979)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2473" id="RHSA-2025:2473" type="rhsa" title="RHSA-2025:2473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50302" id="CVE-2024-50302" type="cve" title="CVE-2024-50302"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53197" id="CVE-2024-53197" type="cve" title="CVE-2024-53197"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57807" id="CVE-2024-57807" type="cve" title="CVE-2024-57807"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57979" id="CVE-2024-57979" type="cve" title="CVE-2024-57979"/>
      <reference href="https://bugzilla.redhat.com/2327169" id="2327169" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2334412" id="2334412" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337098" id="2337098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348562" id="2348562" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2473.html" id="ALSA-2025:2473" type="self" title="ALSA-2025:2473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.44.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.44.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.44.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6a2a3ac33eb374cb7050c681db8edf64fcf09474c61746538a4c58a1ec873ebb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2667</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:23:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2667" id="RHSA-2025:2667" type="rhsa" title="RHSA-2025:2667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2667.html" id="ALSA-2025:2667" type="self" title="ALSA-2025:2667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.104" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">650968562e19a1f4c65ef5497b7adc4c481a52d0b2052205a71eb5c4d2692901</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2670</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:29:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2670" id="RHSA-2025:2670" type="rhsa" title="RHSA-2025:2670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2670.html" id="ALSA-2025:2670" type="self" title="ALSA-2025:2670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.114" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0ec6eb35201fda357ba487ecf609ee35ee5c8589c2dadb958edba5037e27c882</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3026</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-19 00:00:00"/>
    <updated date="2026-04-09 19:24:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: can: bcm: Fix UAF in bcm_proc_show() (CVE-2023-52922)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3026" id="RHSA-2025:3026" type="rhsa" title="RHSA-2025:3026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52922" id="CVE-2023-52922" type="cve" title="CVE-2023-52922"/>
      <reference href="https://bugzilla.redhat.com/2329370" id="2329370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3026.html" id="ALSA-2025:3026" type="self" title="ALSA-2025:3026"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.45.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.45.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.45.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c63a9d4e397c6738b96085a44381a39808f466983f7835f2c0bd95c428173952</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3260</id>
    <title>Important: kernel security update</title>
    <issued date="2025-03-26 00:00:00"/>
    <updated date="2025-03-30 09:24:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CVE-2025-21785)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3260" id="RHSA-2025:3260" type="rhsa" title="RHSA-2025:3260"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21785" id="CVE-2025-21785" type="cve" title="CVE-2025-21785"/>
      <reference href="https://bugzilla.redhat.com/2348630" id="2348630" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3260.html" id="ALSA-2025:3260" type="self" title="ALSA-2025:3260"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.46.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.46.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.46.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">de3b9d74054d734019c5a04ec8324767c1d72f0313088f547c7cf3097cc6cb74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3828</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-04-14 00:00:00"/>
    <updated date="2025-04-14 14:25:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3828" id="RHSA-2025:3828" type="rhsa" title="RHSA-2025:3828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395"/>
      <reference href="https://bugzilla.redhat.com/2339460" id="2339460" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3828.html" id="ALSA-2025:3828" type="self" title="ALSA-2025:3828"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.16" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.16.aarch64.rpm</filename>
          <sum type="sha256">6241423334981aaf9de4dce49fd54ab5b51bcf574058283ef117c7af76b896c1</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.16" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.16.aarch64.rpm</filename>
          <sum type="sha256">6b51350a6d8e3ffe46800f772ad8746a253d4ea2645c676c5537793dca4931b1</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.16" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.16.aarch64.rpm</filename>
          <sum type="sha256">e4bdc574ec60a743e256fe084e917ec4ae9b7015b547c1174effa0638b89d63b</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.16" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.16.aarch64.rpm</filename>
          <sum type="sha256">f83e5b3a12151de63ca558b6d652a61d30efac3f4ada1a89642211c503d64110</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3845</id>
    <title>Moderate: java-1.8.0-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-22 08:23:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3845" id="RHSA-2025:3845" type="rhsa" title="RHSA-2025:3845"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3845.html" id="ALSA-2025:3845" type="self" title="ALSA-2025:3845"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">0d430cacfcd6fd15e1a62f9048df58f0636458fd38a49a185d45d09079470363</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">143dd48fe2aa43708dcdc18e399eb6bdf4dab5f8928d5f80311fca83d68f0244</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">18fff5e3a242bf5bffc91bdab6386de4dfd866daefc24842954cbd62fd0b3872</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3acf7b314c9bbe5895d9b07bbdcd7fdebe6a68ffe533d153690c4642740cd647</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3d7408a1d28beda8eb49e9359501d087cfb2d867b95dfbc9e4d235fbd644bd93</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">59be09b831302cdf75ab21d2db56be12c69df645f36b4e145754954ae7c01f9c</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">96ada400bfbf06c6cdcd3c5748e9c669de356a518e6aa8503405397ad029e7d1</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">a1cae0610835870cf1b0fbcd979ec9ae6bc5970f14c370ea861ad9e0d27a32a0</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">a431e0123bc73b3c0234b929dfe537890b8aa862267648bc21d8a8255176b4f1</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">c0aacedfb08203bf1ad3e44553fe12fee6403eeebed72784219bb5117252547f</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ce4e4a05a2a638ce54d2deb6c2e6806666a22cad190aea1ddebb430f6e43114d</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.452.b09" release="2.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.452.b09-2.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.452.b09-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ec4c8ad18aade387c932b11e27832aa5b1da450ce76b1533a4dd0b7b3771f8ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3852</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:59:49"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3852" id="RHSA-2025:3852" type="rhsa" title="RHSA-2025:3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3852.html" id="ALSA-2025:3852" type="self" title="ALSA-2025:3852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">04d24db7606097667c6cbcb0ff23c2fc68ef7c26e1fa1d7487ec5a846270e93e</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">05c0c106cbb619e4426d0a966bd1c77478377d4bd528b70b454991b838bcfb4e</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">069d1c070518aa8db499f4db2824358170bacf30602031341c809c9d4b61390a</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">28ebe2aaa552031fc97b163e1816fabd7569bc9f462f95e53a2bbba316a1cc56</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3566aa20de09b8e8a27da65d155c672374d18b4194a6cbebb45e45ab48b5c5b5</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">3b9a569a2b3b1115da5c2f8d6158e9a186afac2659305c7b4a1431e7db806810</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">4b8a8de74c7556e26f1ed38084b6f13548184904c843db5dad6c03dff58e7047</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">6ebfc3d8e3044ae9b5195091ee40ecffc8a0eb4f7729d307e9543d1e0e23b684</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">7d0529a5a0413d661cbc2cbd8ca8b8dfe850ba3fce354ddfe64919498cd45282</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">91e06de7e0470916794dc580d107e8fbc2f0c40c30a02dfd4fc92fc2d66fdb9c</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ae11935401f6ae03870ab0c678b7681e9d458d4f5750c4d3ff797fd15765a0ae</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">ba8a1be61370f2ef55e99e861ddf15960e96fbdcf48b541bd9911ea8c8c5ec03</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">cb2b644429f934c137b56834d701909175cccba6e5b310bfa1a86e61343dbeb6</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.15.0.6-2.el8.aarch64.rpm</filename>
          <sum type="sha256">eefb950909c9229a0ca074828e433217482b85b94707f248fe347f685f5c9045</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3855</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:52:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3855" id="RHSA-2025:3855" type="rhsa" title="RHSA-2025:3855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3855.html" id="ALSA-2025:3855" type="self" title="ALSA-2025:3855"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0643e099fce2fe7e93b6a39a107eb55ce9bf984c81b5f498c429b9f35d6063a5</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">1729e2fcad7e67289f4e00c8ad769c231a5d189b768412d1c1031fee586260a4</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">226fc6529043bf837fbd6810bae8f05a9fa02fb720d0e489ebb69381ab636d70</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4970c240105d3f08ead39b7a3a3d8db8859b2e0e333d5f9efdf92234bfcb5823</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">5157ca71d9b841dd62a91faf03656f1fd1cb69f02f8f7dd917179a445fa5ee70</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">51cb62b79f3f7344f3e08a26d961946a0f77f0e8c5fe152161233413295e96cd</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">58c92b047d44a061bd43b1b5d0b91223ed13ce8445caf31ecd7cb63ceb424ce2</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">89655d2ab8b954a4c36ec04d5f3e3476c0639f6e2267bbbe90080cbc9cc5f32c</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">93b9590b7862ccfde6447ffaf43bc7e985b4bb3043c38f3bfb4e38b995c8cab4</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">a5ee70331c2dd8d4c1573e68a76d584918e49971f367781c8b314948a1016428</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c5eb5d61df2f3321b6a2558343264d07ca8a70fa2e6367f36a3fdc1f23f479ec</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">d4b177c9102352565beb1aef76b58b4ae1bb97673d9e5d5b5d77d04f53778a2a</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f34aa3c1529ca56c96b770e19f08e4fe74b3b5e1c87a5520259cd0308d0f11b3</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.7.0.6-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f6ed5961a0c59ba5b2170782ce2964f5947a68038c6a06da7e43080310c71114</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3893</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-04-15 00:00:00"/>
    <updated date="2025-04-15 14:21:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  * kernel: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CVE-2024-53150)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3893" id="RHSA-2025:3893" type="rhsa" title="RHSA-2025:3893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53150" id="CVE-2024-53150" type="cve" title="CVE-2024-53150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53241" id="CVE-2024-53241" type="cve" title="CVE-2024-53241"/>
      <reference href="https://bugzilla.redhat.com/2331326" id="2331326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2333971" id="2333971" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3893.html" id="ALSA-2025:3893" type="self" title="ALSA-2025:3893"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.50.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.50.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.50.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e6f78935f1e31b5f1d54e6d68cb3c1d941d9ecfe42761f533fc42eabfe415dec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4043</id>
    <title>Moderate: bluez security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2025-04-22 12:08:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)
  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4043" id="RHSA-2025:4043" type="rhsa" title="RHSA-2025:4043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589"/>
      <reference href="https://bugzilla.redhat.com/2278787" id="2278787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278965" id="2278965" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4043.html" id="ALSA-2025:4043" type="self" title="ALSA-2025:4043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bluez-libs-devel" version="5.63" release="5.el8_10.alma.1" epoch="0" arch="aarch64" src="bluez-5.63-5.el8_10.alma.1.src.rpm">
          <filename>bluez-libs-devel-5.63-5.el8_10.alma.1.aarch64.rpm</filename>
          <sum type="sha256">1730f8d10c75af4b40af291fd0f38c3445f0515a770afc23d2bb51f1fa06c043</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4048</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2026-04-09 18:11:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.  

Security Fix(es):  

  * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4048" id="RHSA-2025:4048" type="rhsa" title="RHSA-2025:4048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8176" id="CVE-2024-8176" type="cve" title="CVE-2024-8176"/>
      <reference href="https://bugzilla.redhat.com/2310137" id="2310137" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4048.html" id="ALSA-2025:4048" type="self" title="ALSA-2025:4048"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xmlrpc-c-c++" version="1.51.0" release="11.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-11.el8_10.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-11.el8_10.aarch64.rpm</filename>
          <sum type="sha256">79c0dcaee4048842741c6542954f0f089eb878e26ca34784d726bb2c87dafa5c</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="11.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-11.el8_10.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-11.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c5d93458d08b40d2a9cb5c3b0d206b8a7390ef7c65a38a50884948b7b033cb3c</sum>
        </package>
        <package name="xmlrpc-c-devel" version="1.51.0" release="11.el8_10" epoch="0" arch="aarch64" src="xmlrpc-c-1.51.0-11.el8_10.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-11.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ca4495a8294ddb958d7d380cbaaad684da864b98530fc90497a03955cad25e2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4362</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-04-30 00:00:00"/>
    <updated date="2025-05-05 09:45:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4362" id="RHSA-2025:4362" type="rhsa" title="RHSA-2025:4362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-27792" id="CVE-2020-27792" type="cve" title="CVE-2020-27792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46751" id="CVE-2023-46751" type="cve" title="CVE-2023-46751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46951" id="CVE-2024-46951" type="cve" title="CVE-2024-46951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46952" id="CVE-2024-46952" type="cve" title="CVE-2024-46952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46953" id="CVE-2024-46953" type="cve" title="CVE-2024-46953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46954" id="CVE-2024-46954" type="cve" title="CVE-2024-46954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46956" id="CVE-2024-46956" type="cve" title="CVE-2024-46956"/>
      <reference href="https://bugzilla.redhat.com/2247179" id="2247179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253365" id="2253365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325041" id="2325041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325043" id="2325043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325044" id="2325044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325045" id="2325045" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325047" id="2325047" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4362.html" id="ALSA-2025:4362" type="self" title="ALSA-2025:4362"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="ghostscript-tools-printing" version="9.27" release="16.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-tools-printing-9.27-16.el8_10.aarch64.rpm</filename>
          <sum type="sha256">01d8cd211ba6362979b86f507a6b9d8f8decec4d696ec8df6b7f8331b031ccc9</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.27" release="16.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-16.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3fbdc7c18fe13d12b717f9db17371eef68a217baecfc58dc3679934401b55dcc</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="16.el8_10" epoch="0" arch="noarch" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-doc-9.27-16.el8_10.noarch.rpm</filename>
          <sum type="sha256">43d139df332c77109b35583f9703c08e52add74085247be9afb4e8288332e8c0</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="16.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-16.el8_10.aarch64.rpm</filename>
          <sum type="sha256">be38928a3bffa0b5c079e017dafd034ef1fdad4848f4390edc445a577ada12cf</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="16.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>libgs-devel-9.27-16.el8_10.aarch64.rpm</filename>
          <sum type="sha256">db27f73036d8da9d05da94b66e809d22df7075b16664a48d66179aadb06bdd00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4658</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2025-05-07 00:00:00"/>
    <updated date="2025-05-07 15:11:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service (CVE-2017-17095)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4658" id="RHSA-2025:4658" type="rhsa" title="RHSA-2025:4658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2017-17095" id="CVE-2017-17095" type="cve" title="CVE-2017-17095"/>
      <reference href="https://bugzilla.redhat.com/1524284" id="1524284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4658.html" id="ALSA-2025:4658" type="self" title="ALSA-2025:4658"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="34.el8_10" epoch="0" arch="aarch64" src="libtiff-4.0.9-34.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-34.el8_10.aarch64.rpm</filename>
          <sum type="sha256">fc527cfca82749ea52bac1184b4baa884636c2f0b86dfbf95319557d5ec9bf9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7531</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:56:10"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CVE-2022-49011)
  * kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt (CVE-2024-53141)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7531" id="RHSA-2025:7531" type="rhsa" title="RHSA-2025:7531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49011" id="CVE-2022-49011" type="cve" title="CVE-2022-49011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53141" id="CVE-2024-53141" type="cve" title="CVE-2024-53141"/>
      <reference href="https://bugzilla.redhat.com/2320778" id="2320778" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330763" id="2330763" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7531.html" id="ALSA-2025:7531" type="self" title="ALSA-2025:7531"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.52.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.52.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.52.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4dd70b6bd5ff68abef312b8bd8b5fa9868fb8fc359cb1d87e49745bb832d4bf9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7540</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-06-10 19:29:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.  

Security Fix(es):  

  * libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7540" id="RHSA-2025:7540" type="rhsa" title="RHSA-2025:7540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-13790" id="CVE-2020-13790" type="cve" title="CVE-2020-13790"/>
      <reference href="https://bugzilla.redhat.com/1847155" id="1847155" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7540.html" id="ALSA-2025:7540" type="self" title="ALSA-2025:7540"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="turbojpeg-devel" version="1.5.3" release="14.el8_10" epoch="0" arch="aarch64" src="libjpeg-turbo-1.5.3-14.el8_10.src.rpm">
          <filename>turbojpeg-devel-1.5.3-14.el8_10.aarch64.rpm</filename>
          <sum type="sha256">90f21d8004029a96c5174b8de655e5237f12b6723dd3a5c152438d9665037c0c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7569</id>
    <title>Important: yelp and yelp-xsl security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:52:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yelp and yelp-xsl security update</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.  

Security Fix(es):  

  * yelp: Arbitrary file read (CVE-2025-3155)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7569" id="RHSA-2025:7569" type="rhsa" title="RHSA-2025:7569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3155" id="CVE-2025-3155" type="cve" title="CVE-2025-3155"/>
      <reference href="https://bugzilla.redhat.com/2357091" id="2357091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7569.html" id="ALSA-2025:7569" type="self" title="ALSA-2025:7569"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="yelp-devel" version="3.28.1" release="3.el8_10.1" epoch="2" arch="aarch64" src="yelp-3.28.1-3.el8_10.1.src.rpm">
          <filename>yelp-devel-3.28.1-3.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">d61d8cd881644ab3043a7a7a8fee6466017de695c61d56fb00874f1e96b6a008</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7571</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:46:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7571" id="RHSA-2025:7571" type="rhsa" title="RHSA-2025:7571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7571.html" id="ALSA-2025:7571" type="self" title="ALSA-2025:7571"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.106" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.106-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">acc6cf8b785a994c7b6ef24bd2e5f34a85ed06f8e3bc10c135cf7518c0eada54</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7589</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:41:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7589" id="RHSA-2025:7589" type="rhsa" title="RHSA-2025:7589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7589.html" id="ALSA-2025:7589" type="self" title="ALSA-2025:7589"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.116" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.116-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4dddfc1e8e5dd94ad05efa35eec91f00f62843e99b7d9ef971578e614f6dff1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8056</id>
    <title>Important: kernel security update</title>
    <issued date="2025-05-21 00:00:00"/>
    <updated date="2025-05-21 12:57:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: net/mlx5: Always stop health timer during driver removal (CVE-2024-40906)
  * kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (CVE-2024-44970)
  * kernel: vsock: Keep the binding until socket destruction (CVE-2025-21756)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8056" id="RHSA-2025:8056" type="rhsa" title="RHSA-2025:8056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-40906" id="CVE-2024-40906" type="cve" title="CVE-2024-40906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-44970" id="CVE-2024-44970" type="cve" title="CVE-2024-44970"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21756" id="CVE-2025-21756" type="cve" title="CVE-2025-21756"/>
      <reference href="https://bugzilla.redhat.com/2297490" id="2297490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2309801" id="2309801" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348609" id="2348609" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8056.html" id="ALSA-2025:8056" type="self" title="ALSA-2025:8056"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.53.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.53.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.53.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0366a033f33cbc9861903529fbda6be9adfafa876db0fbd8b894d92ecc98c84b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8201</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2025-05-27 00:00:00"/>
    <updated date="2025-05-27 13:26:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8201" id="RHSA-2025:8201" type="rhsa" title="RHSA-2025:8201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3887" id="CVE-2025-3887" type="cve" title="CVE-2025-3887"/>
      <reference href="https://bugzilla.redhat.com/2367919" id="2367919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8201.html" id="ALSA-2025:8201" type="self" title="ALSA-2025:8201"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="5.el8_10" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-5.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2cf51038b2b49dbc36c4741607d0d92e7b7d40531242001f2c21e106d3480727</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8246</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-05-28 00:00:00"/>
    <updated date="2025-05-28 11:00:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CVE-2024-43842)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8246" id="RHSA-2025:8246" type="rhsa" title="RHSA-2025:8246"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43842" id="CVE-2024-43842" type="cve" title="CVE-2024-43842"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8246.html" id="ALSA-2025:8246" type="self" title="ALSA-2025:8246"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.54.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.54.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.54.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1837634f2dcf9b47d7c037036002a0148a9f20bfd581beed977b3543c3cb0de0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8292</id>
    <title>Important: mingw-freetype security update</title>
    <issued date="2025-05-29 00:00:00"/>
    <updated date="2025-05-29 21:17:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-freetype security update</summary>
    <description>MinGW Windows Freetype library.  

Security Fix(es):  

  * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)
  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)
  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)
  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)
  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)
  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)
  * libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c (CVE-2025-32909)
  * libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication (CVE-2025-32910)
  * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911)
  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8292" id="RHSA-2025:8292" type="rhsa" title="RHSA-2025:8292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27363" id="CVE-2025-27363" type="cve" title="CVE-2025-27363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32050" id="CVE-2025-32050" type="cve" title="CVE-2025-32050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32052" id="CVE-2025-32052" type="cve" title="CVE-2025-32052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32053" id="CVE-2025-32053" type="cve" title="CVE-2025-32053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32906" id="CVE-2025-32906" type="cve" title="CVE-2025-32906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32907" id="CVE-2025-32907" type="cve" title="CVE-2025-32907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32909" id="CVE-2025-32909" type="cve" title="CVE-2025-32909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32910" id="CVE-2025-32910" type="cve" title="CVE-2025-32910"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32911" id="CVE-2025-32911" type="cve" title="CVE-2025-32911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32913" id="CVE-2025-32913" type="cve" title="CVE-2025-32913"/>
      <reference href="https://bugzilla.redhat.com/2351357" id="2351357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357067" id="2357067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357069" id="2357069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357070" id="2357070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359341" id="2359341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359342" id="2359342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359353" id="2359353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359354" id="2359354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359355" id="2359355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359357" id="2359357" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8292.html" id="ALSA-2025:8292" type="self" title="ALSA-2025:8292"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw64-freetype-static" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw64-freetype-static-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">0957d400fcdc58bd0f238741050524a3edbfc6c78ab32517041fd241ec27863d</sum>
        </package>
        <package name="mingw64-freetype" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw64-freetype-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">3143c194abf5de4874dd12d4e8dbee75a69ac9eba080432066ceecb913ede3a8</sum>
        </package>
        <package name="mingw32-freetype" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw32-freetype-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">396f2664f2a53de20939acb4a803c90bbbf0df5f5294034a6d3b3f32532de8ed</sum>
        </package>
        <package name="mingw32-freetype-static" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw32-freetype-static-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">dcf87ef91d019b7c813fbf38b2596772d8f3ce3ac781e31bc047951e827601f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8421</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-07-02 11:45:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8421" id="RHSA-2025:8421" type="rhsa" title="RHSA-2025:8421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27832" id="CVE-2025-27832" type="cve" title="CVE-2025-27832"/>
      <reference href="https://bugzilla.redhat.com/2354949" id="2354949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8421.html" id="ALSA-2025:8421" type="self" title="ALSA-2025:8421"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="ghostscript-tools-fonts" version="9.27" release="17.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-17.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1a9969ca97b2ad6223a471a49230dbdd587a1488b9c90a86891eb299942790c9</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="17.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-tools-printing-9.27-17.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4946c62ea0ee9f89f9e4ebcf3ef516770ed30e108774cd007e559323716c3ca3</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="17.el8_10" epoch="0" arch="noarch" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-doc-9.27-17.el8_10.noarch.rpm</filename>
          <sum type="sha256">510111263297057090e406f085f8dfddc460705ac61e53dff37182a7a8eb082c</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="17.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-17.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5196d37ff99273e6a89088284784e431f031b4b0a009f9f041ff569d5c13a955</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="17.el8_10" epoch="0" arch="aarch64" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>libgs-devel-9.27-17.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e483ff71085dfb5608131743a0276582c9bd2c7290abfbd74d3a2b636449f6cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8427</id>
    <title>Moderate: pandoc security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-07-02 11:42:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pandoc security update</summary>
    <description>Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. It can read several dialects of Markdown and (subsets of) HTML, reStructuredText, LaTeX, DocBook, JATS, MediaWiki markup, TWiki markup, TikiWiki markup, Creole 1.0, Haddock markup, OPML, Emacs Org-Mode, Emacs Muse, txt2tags, Vimwiki, Word Docx, ODT, and Textile, and it can write Markdown, reStructuredText, XHTML, HTML 5, LaTeX, ConTeXt, DocBook, JATS, OPML, TEI, OpenDocument, ODT, Word docx, RTF, MediaWiki, DokuWiki, ZimWiki, Textile, groff man, groff ms, plain text, Emacs Org-Mode, AsciiDoc, Haddock markup, EPUB (v2 and v3), FictionBook2, InDesign ICML, Muse, LaTeX beamer slides, PowerPoint, and several kinds of HTML/JavaScript slide shows (S5, Slidy, Slideous, DZSlides, reveal.js). In contrast to most existing tools for converting Markdown to HTML, pandoc has a modular design: it consists of a set of readers, which parse text in a given format and produce a native representation of the document, and a set of writers, which convert this native representation into a target format. Thus, adding an input or output format requires only adding a reader or writer. For pdf output please also install pandoc-pdf.  

Security Fix(es):  

  * cmark-gfm: Quadratic complexity bugs may lead to a denial of service (CVE-2023-24824)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8427" id="RHSA-2025:8427" type="rhsa" title="RHSA-2025:8427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24824" id="CVE-2023-24824" type="cve" title="CVE-2023-24824"/>
      <reference href="https://bugzilla.redhat.com/2210172" id="2210172" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8427.html" id="ALSA-2025:8427" type="self" title="ALSA-2025:8427"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="pandoc-common" version="2.0.6" release="7.el8_10" epoch="0" arch="noarch" src="pandoc-2.0.6-7.el8_10.src.rpm">
          <filename>pandoc-common-2.0.6-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">28442aefc88745fe955361b1aad57f3548d2c9ef3d8cf738eca22a80abad55a2</sum>
        </package>
        <package name="pandoc" version="2.0.6" release="7.el8_10" epoch="0" arch="aarch64" src="pandoc-2.0.6-7.el8_10.src.rpm">
          <filename>pandoc-2.0.6-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">9c510b86ae3970f0f4c9b754055001fa2c2d73a1362e887d6dfcd24efc7d6360</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8686</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-11 11:31:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8686" id="RHSA-2025:8686" type="rhsa" title="RHSA-2025:8686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802"/>
      <reference href="https://bugzilla.redhat.com/2367468" id="2367468" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8686.html" id="ALSA-2025:8686" type="self" title="ALSA-2025:8686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="glibc-static" version="2.28" release="251.el8_10.22" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.22.aarch64.rpm</filename>
          <sum type="sha256">0497d871216e2733ddbfc8bad6a84bd65e4da12d418b4d1e70019579f5d92d97</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.22" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.22.aarch64.rpm</filename>
          <sum type="sha256">265e18e945f004320355c7d41656e2c09fad54a985e8444b81989b9d3646e008</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.22" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.22.aarch64.rpm</filename>
          <sum type="sha256">cf47ddc1a2332966c7157b18a39dc54773f60631d1a125e4aac3170e65923ac0</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.22" epoch="0" arch="aarch64" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.22.aarch64.rpm</filename>
          <sum type="sha256">f71e074a37ad92d31b9dbc0f5e21a5f616fa27aa4bd9c173a7d0fa5e53d4f4d2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8743</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-10 00:00:00"/>
    <updated date="2025-06-11 11:37:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: um: Fix out-of-bounds read in LDT setup (CVE-2022-49395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8743" id="RHSA-2025:8743" type="rhsa" title="RHSA-2025:8743"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-49395" id="CVE-2022-49395" type="cve" title="CVE-2022-49395"/>
      <reference href="https://bugzilla.redhat.com/2347899" id="2347899" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8743.html" id="ALSA-2025:8743" type="self" title="ALSA-2025:8743"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.56.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.56.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.56.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">10b75d58ce3f2fe753acc5452fd95adf41560dcd5e0aa28309bb6b1d32336506</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8812</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:13:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8812" id="RHSA-2025:8812" type="rhsa" title="RHSA-2025:8812"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8812.html" id="ALSA-2025:8812" type="self" title="ALSA-2025:8812"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.117" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.117-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">11e7e862a2db4e38283ad28a0e8050c08129b8e750c569fce4849b51788873be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8815</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-07-02 11:32:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8815" id="RHSA-2025:8815" type="rhsa" title="RHSA-2025:8815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8815.html" id="ALSA-2025:8815" type="self" title="ALSA-2025:8815"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.107" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.107-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4d7f341ca2c91c319ee202a75cc37bce17d135e80e3aab929a1c2c720a338c79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9119</id>
    <title>Important: libvpx security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 07:38:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Double-free in libvpx encoder (CVE-2025-5283)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9119" id="RHSA-2025:9119" type="rhsa" title="RHSA-2025:9119"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5283" id="CVE-2025-5283" type="cve" title="CVE-2025-5283"/>
      <reference href="https://bugzilla.redhat.com/2368749" id="2368749" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9119.html" id="ALSA-2025:9119" type="self" title="ALSA-2025:9119"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libvpx-devel" version="1.7.0" release="12.el8_10" epoch="0" arch="aarch64" src="libvpx-1.7.0-12.el8_10.src.rpm">
          <filename>libvpx-devel-1.7.0-12.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f6013684fbbbc2eb972b48b4f1cae6b267afd8a8f888d7aac0bd44a0e769f163</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9305</id>
    <title>Important: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:21:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9305" id="RHSA-2025:9305" type="rhsa" title="RHSA-2025:9305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9305.html" id="ALSA-2025:9305" type="self" title="ALSA-2025:9305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="26.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-26.el8_10.noarch.rpm</filename>
          <sum type="sha256">5e4a965b0532e061163cabf09726314be06ce6eee8f44cb31b4bba177cb2ce20</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="26.el8_10" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-26.el8_10.aarch64.rpm</filename>
          <sum type="sha256">8919e122389f6389d9245117a60884e695cf28e0e2dd3e5cc84c7f3a330dfe41</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9318</id>
    <title>Important: javapackages-tools:201801 security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:39:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>javapackages-tools:201801 security update</summary>
    <description>The javapackages-tools packages provide macros and scripts to support Java packaging.  

Security Fix(es):  

  * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086)
  * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9318" id="RHSA-2025:9318" type="rhsa" title="RHSA-2025:9318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-10086" id="CVE-2019-10086" type="cve" title="CVE-2019-10086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48734" id="CVE-2025-48734" type="cve" title="CVE-2025-48734"/>
      <reference href="https://bugzilla.redhat.com/1767483" id="1767483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368956" id="2368956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9318.html" id="ALSA-2025:9318" type="self" title="ALSA-2025:9318"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="javapackages-tools" stream="201801" version="8100020250623120251" context="9edba152" arch="aarch64"/>
        <package name="bnd-maven-plugin" version="3.5.0" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="aqute-bnd-3.5.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bnd-maven-plugin-3.5.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">00590a95695ae3025498d81965dea1b76b35e4ef42c5f3005e84f836d5a1dd84</sum>
        </package>
        <package name="maven-wagon-file" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-file-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">00c59a2866b11e472e4fa22f0d5fc88a99af4f12bf6c75852f56f8fffc29b321</sum>
        </package>
        <package name="guava20-javadoc" version="20.0" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="guava20-20.0-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guava20-javadoc-20.0-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">00d940d67121294a33ff85918ed0edc149a5cbb3f5c9930873f8e71bbd75c6cb</sum>
        </package>
        <package name="xmvn-tools-pom" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-tools-pom-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">010bae1abe4f7c36f3324485764b277ca1187ac7316e31767bd65fd4f429b88e</sum>
        </package>
        <package name="apache-commons-parent" version="43" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-parent-43-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-parent-43-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0160d7cf1558b29566832213b2f750c24d95b9dc969e06598ba7a834379340f2</sum>
        </package>
        <package name="maven-doxia-sitetools" version="1.7.5" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-sitetools-1.7.5-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-sitetools-1.7.5-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">017891a2501f8709a43fca1b27140ce3746009b0c39ff1c3e96db067d8997521</sum>
        </package>
        <package name="apache-commons-jxpath" version="1.3" release="29.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-jxpath-1.3-29.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-jxpath-1.3-29.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">01a91144d0d5d1d8bcf3251f65604551b2f0a523622cc4a5b7fa257550100312</sum>
        </package>
        <package name="apache-commons-lang3" version="3.7" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-lang3-3.7-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-lang3-3.7-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">01b973aed59caec39ea7e1c09b3e0dc67a556482a795f27b62349b540016c8bc</sum>
        </package>
        <package name="apache-commons-codec-javadoc" version="1.11" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-codec-1.11-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-codec-javadoc-1.11-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">027be69f6241f24e377b8b42142e97e008fdb5cc0c1cd6bc0bb39f594ed75fef</sum>
        </package>
        <package name="maven-enforcer-api" version="1.4.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-enforcer-1.4.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-enforcer-api-1.4.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">02f5157a3f03f2ea8052f15443d54edad618d42556125bc1a931548917f446ca</sum>
        </package>
        <package name="maven-enforcer-rules" version="1.4.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-enforcer-1.4.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-enforcer-rules-1.4.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0433e7a6734fa23371ac579dfc25669b6689b5d50a3207906f6e72f9577b4c90</sum>
        </package>
        <package name="plexus-classworlds" version="2.5.2" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-classworlds-2.5.2-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-classworlds-2.5.2-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0473de4da9a5df8edd3f56b984f3f58927881270c623529ea23f46e21d83fa3b</sum>
        </package>
        <package name="ant-lib" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-lib-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">04a02def2016e161f6268708c14265799ee2efcc50f3a293a0fede1216216eee</sum>
        </package>
        <package name="testng-javadoc" version="6.14.3" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="testng-6.14.3-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/testng-javadoc-6.14.3-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">05cfe30629faec226834bc5b5d20c241f8166bf6c4d14af1945cfb7586a1c087</sum>
        </package>
        <package name="plexus-cipher" version="1.7" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-cipher-1.7-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-cipher-1.7-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0620f46002038275e0656e36ccedae1e4f017e41e24d48281391406b364153b0</sum>
        </package>
        <package name="plexus-archiver" version="3.6.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-archiver-3.6.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-archiver-3.6.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">06d2e2a3314621a35cc70d17675899e5cac5d771cabbd9619f6aad4c20b5a5a6</sum>
        </package>
        <package name="apache-commons-beanutils-javadoc" version="1.9.3" release="5.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="apache-commons-beanutils-1.9.3-5.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>apache-commons-beanutils-javadoc-1.9.3-5.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">071643d508bcd90e72e5c3a69b775d0ec71b3749854af95de045dbcfe84fb954</sum>
        </package>
        <package name="maven-plugin-tools-annotations" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-annotations-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">07bf8b5faa28011ed0c9c4f60df015ae13a33ab84d87f644c79f9cba04b22b80</sum>
        </package>
        <package name="maven-wagon" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">07ce987eb97537a33b3332c20cb735c8b601d5bb82f913396ee11beb9d7e39e9</sum>
        </package>
        <package name="maven-dependency-analyzer-javadoc" version="1.8" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-dependency-analyzer-1.8-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-dependency-analyzer-javadoc-1.8-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">08c8a8d3d06a2c8f8a14a36e2b9ce5a44a2bc5903d3119e632301735c4b40769</sum>
        </package>
        <package name="jaxen-javadoc" version="1.1.6" release="18.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jaxen-1.1.6-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jaxen-javadoc-1.1.6-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0973ab0d6f02df76e3e772263ed687c2007f7f41f564e9966299e9fc83314488</sum>
        </package>
        <package name="jul-to-slf4j" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jul-to-slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">09dce57ec49644d23dc9077619b3ba439c6ce1088fb09897d4022b87f403cb03</sum>
        </package>
        <package name="xmvn-minimal" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-minimal-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">09dd007f106cd8bdd18ce34ee51fc952b6f24485b79b0191f57f91ab2468a82f</sum>
        </package>
        <package name="jansi" version="1.17.1" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jansi-1.17.1-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jansi-1.17.1-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0a29855bb37b378f00709155bb1f74ed9eb02cb5419b3c1f9aa30b6fba5914e0</sum>
        </package>
        <package name="maven-plugin-tools" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0a65f70a8aa52c2930205792da06d39d9b0c6cfd69e1447ed5861f50933f9ce3</sum>
        </package>
        <package name="xmvn-javadoc" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-javadoc-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0a87b39545940360bdbaaab4147c2ae580d5d9d17fb26bab2df15fd6cd5fd706</sum>
        </package>
        <package name="xerces-j2-javadoc" version="2.11.0" release="34.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xerces-j2-2.11.0-34.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xerces-j2-javadoc-2.11.0-34.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0a90455939e55209909c2b57e6cb2249649a86b6668e52a0983678b9d1483811</sum>
        </package>
        <package name="maven-install-plugin-javadoc" version="2.5.2" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-install-plugin-2.5.2-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-install-plugin-javadoc-2.5.2-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0b3b0322b4325f1ace443f14c69e5a382bf5e8b9fa3d1be6c15fa5dc3391c862</sum>
        </package>
        <package name="apache-commons-io" version="2.6" release="3.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="apache-commons-io-2.6-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-io-2.6-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0b64f43120b9516e61e26445145a9cb8a23b2da8cefe94645eb883cb509a1a73</sum>
        </package>
        <package name="maven-monitor" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-monitor-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0baa42c4a93c6882e458d0db2e3a3e4cf279176a1dc71ec805583199a8b260fe</sum>
        </package>
        <package name="maven-verifier-javadoc" version="1.6" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-verifier-1.6-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-verifier-javadoc-1.6-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0c427729d66424ce3e940558d9faa823bbde4b954b238f749edccab7ca05981b</sum>
        </package>
        <package name="plexus-compiler" version="2.8.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-compiler-2.8.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-compiler-2.8.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0c7aee7105866e626b341224959287787564be44869a47af7ff04ef03ea24b76</sum>
        </package>
        <package name="maven-wagon-provider-api" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-provider-api-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0ce38eeb87e7179b27916581c25729798a0bb0852d3220e6dad3d6d84fefe344</sum>
        </package>
        <package name="maven-shade-plugin-javadoc" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shade-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shade-plugin-javadoc-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0cf36f08845864da8e51fe5729fda92ec892de2d5c34c7412668bdbd34c5de4c</sum>
        </package>
        <package name="plexus-compiler-extras" version="2.8.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-compiler-2.8.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-compiler-extras-2.8.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">0f4d1afc8a418539b42bd79ad2f870f029cb54de94c3f284d7ad96d57c421fe8</sum>
        </package>
        <package name="cdi-api-javadoc" version="1.2" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cdi-api-1.2-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/cdi-api-javadoc-1.2-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">107667e58cf3c85c1b12c92745e8bb2cbc0fd20036174ab8b57fb00b4b6cf819</sum>
        </package>
        <package name="maven-antrun-plugin" version="1.8" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-antrun-plugin-1.8-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-antrun-plugin-1.8-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">10a6505711bc6f6e6f19f294adfb5831efbc87be0ced91e9d1cb5ed3c05149c3</sum>
        </package>
        <package name="xalan-j2-manual" version="2.7.1" release="38.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xalan-j2-2.7.1-38.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xalan-j2-manual-2.7.1-38.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">125e5796c46297d3fb76ca629c26e6a4363cafcef4f5188fcabfe596d8c58d51</sum>
        </package>
        <package name="felix-osgi-core" version="1.4.0" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-osgi-core-1.4.0-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-osgi-core-1.4.0-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">125f0955cc472b8ec063dfddb00d4bf107fc6ff7c1fcacf7958cffa64d920d46</sum>
        </package>
        <package name="geronimo-jms" version="1.1.1" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-jms-1.1.1-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-jms-1.1.1-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">12e6672a5e27b248de305ccb0e114db5784a20a8616b60b1ba18409f5795c77a</sum>
        </package>
        <package name="jboss-parent" version="20" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jboss-parent-20-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jboss-parent-20-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1300384932732f4f2f10332ce4d9807c7e854e83b0922e043205ac0ce4772f6d</sum>
        </package>
        <package name="bsh-javadoc" version="2.0" release="13.b6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bsh-2.0-13.b6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bsh-javadoc-2.0-13.b6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1315a0bc704f27b4963904afa57a07f9e6a9edf755d9cfbbf2bb9fe77c55dfc3</sum>
        </package>
        <package name="plexus-containers" version="1.7.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">13298e8586327aaaf4ff11727a30391defe0053ed5165b484bfe74e44097bdc5</sum>
        </package>
        <package name="maven-dependency-tree" version="3.0" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-dependency-tree-3.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-dependency-tree-3.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1331fecc3b1a68d8d0178823705a696c25cc71b60922c531d3cbddd225a77e1f</sum>
        </package>
        <package name="xmvn-mojo" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-mojo-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">137112cf8ad936f4facff7a7328c3b649cc391e632e77e9bef7c6d48e71b471b</sum>
        </package>
        <package name="maven-doxia-module-rtf" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-rtf-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">13d2547d2de15b7c50d943e04dc24587785fbdc2f9c294a23a216002b34bf58f</sum>
        </package>
        <package name="maven-plugin-testing" version="3.3.0" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-testing-3.3.0-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-testing-3.3.0-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">13e40bfb1d2d36baf52b57d47c932d2f50810399c4795ed5982799ef34db0240</sum>
        </package>
        <package name="maven-lib" version="3.5.4" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-3.5.4-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-lib-3.5.4-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1467868b0a01c11bd2de0c02c1af2b460126f868ab388e4301aa2815f1e3d4d7</sum>
        </package>
        <package name="geronimo-jpa-javadoc" version="1.1.1" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-jpa-1.1.1-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-jpa-javadoc-1.1.1-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">14b763153b34f899c4c2f2758c94430480e9e4ad63d2571553f176f54fce0591</sum>
        </package>
        <package name="plexus-interactivity" version="1.0" release="0.27.alpha6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-interactivity-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-interactivity-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">14bb1f307d046b52a1b57bcf1636f1f479bc55418c7cabab5487d2a4c9cbebb7</sum>
        </package>
        <package name="maven-doxia-module-latex" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-latex-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">14cc154c65afe6901eb884e30bd9cbac633eb4cba18299b2800a733c52297078</sum>
        </package>
        <package name="apache-ivy-javadoc" version="2.4.0" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-ivy-2.4.0-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-ivy-javadoc-2.4.0-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1502aa3fccc78dc3c8069db7c5a8b4e49c8b5430f0b4aab858454a104d696f28</sum>
        </package>
        <package name="jdom-javadoc" version="1.1.3" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdom-1.1.3-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdom-javadoc-1.1.3-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">16215b40a6d27d171e250d2371df77729cb0241519c9a4e73f341eada15968d1</sum>
        </package>
        <package name="isorelax" version="0" release="0.23.release20050331.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="isorelax-0-0.23.release20050331.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/isorelax-0-0.23.release20050331.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">171dc7fbd4a6ff9cb3b2bb5e073de21ff4d6b344287204518e26110e145ff762</sum>
        </package>
        <package name="xmvn" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">173efeaaa9a2d2a524533c66901d3ae91e0df4b978179fa53d19f18db8380659</sum>
        </package>
        <package name="slf4j-manual" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-manual-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">188b4b9720c6af689bfb39659e298c676ee96eb5811a2f05a29b824d574440a1</sum>
        </package>
        <package name="ivy-local" version="5.3.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javapackages-tools-5.3.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ivy-local-5.3.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1a21b3a105902472bf4c9923cb133285a18641ad21f8ed66ad59cb854c33b783</sum>
        </package>
        <package name="plexus-cli" version="1.6" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-cli-1.6-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-cli-1.6-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1b0132e569b401a3608125de11e7c87ef87033fb8f3182249596b93220b95c12</sum>
        </package>
        <package name="maven-doxia-test-docs" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-test-docs-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1b5ecbe74bdcd7bb9f20038337677fcd4b4878ed7b6530b286bd2327cde75bf4</sum>
        </package>
        <package name="osgi-core" version="6.0.0" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="osgi-core-6.0.0-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/osgi-core-6.0.0-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1bae6ee6446ffe0ed5a9eb7fa0522d91c3b95eb5c7f4287061440ae7da8876a5</sum>
        </package>
        <package name="aopalliance" version="1.0" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="aopalliance-1.0-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/aopalliance-1.0-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1c87cff4aee02e8d6eca8c3bfc6d25d91806b05af3afc66ec45edd0676222b59</sum>
        </package>
        <package name="aqute-bndlib" version="3.5.0" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="aqute-bnd-3.5.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/aqute-bndlib-3.5.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1d422b93c4af1b5ff61ae4986f6e38ce9bba903299179a867731f462d54d07cf</sum>
        </package>
        <package name="maven-resources-plugin-javadoc" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-resources-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resources-plugin-javadoc-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1d9751fdfd0a6352f03029be2ca9a208057e646db659f5f227d5c8d7d839e11e</sum>
        </package>
        <package name="plexus-bsh-factory-javadoc" version="1.0" release="0.19.a7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-bsh-factory-1.0-0.19.a7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-bsh-factory-javadoc-1.0-0.19.a7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1da09d87bce81a0dfb7ff028bab3d9493733134fd0416130997493d7455491b9</sum>
        </package>
        <package name="xalan-j2-javadoc" version="2.7.1" release="38.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xalan-j2-2.7.1-38.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xalan-j2-javadoc-2.7.1-38.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1ddd1097d0e97bba2b0958d69927c6bbfe79d3b9c7e36cd8607814efb5ce6f4e</sum>
        </package>
        <package name="osgi-compendium-javadoc" version="6.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="osgi-compendium-6.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/osgi-compendium-javadoc-6.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1ea92eef4524c1f5d7e23b1aac5df13dea0e78c9f3c727372d8529c70d300245</sum>
        </package>
        <package name="xmvn-resolve" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-resolve-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1ec06f2cce7458452aac030aaf0758b7411308dec7f4778a2a724dde9f0b0a55</sum>
        </package>
        <package name="jakarta-oro-javadoc" version="2.0.8" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jakarta-oro-2.0.8-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jakarta-oro-javadoc-2.0.8-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1f55e1476faa45dbb191afbce7c6b89574628cb9ca9430d71f2e04e5702ca0c5</sum>
        </package>
        <package name="jakarta-commons-httpclient-demo" version="3.1" release="28.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="jakarta-commons-httpclient-3.1-28.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jakarta-commons-httpclient-demo-3.1-28.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">1f94bd0c8fe9b5f1cbd629546fca1123ef11f2d0ab42948a4d4090455264f3b6</sum>
        </package>
        <package name="bsf" version="2.4.0" release="30.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bsf-2.4.0-30.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bsf-2.4.0-30.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">202751247da590d57262625d2c3097f97e960a62f388cf4a761f3e75e273c3fc</sum>
        </package>
        <package name="ant-commons-logging" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-commons-logging-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">203e8eb7e75a0b5a2780c7428877963a22bc6944f6aae97b32afe563d811aa67</sum>
        </package>
        <package name="atinject" version="1" release="28.20100611svn86.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="atinject-1-28.20100611svn86.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/atinject-1-28.20100611svn86.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2057a4ae56b4ddac8dd0543f27f6b555495d04e1cb644b08ac43da4aa88d2459</sum>
        </package>
        <package name="xz-java" version="1.8" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xz-java-1.8-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xz-java-1.8-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2071762ba8cf4f88f811a12f975e526102e1fcb193c41d0ec263cac7625188a6</sum>
        </package>
        <package name="apache-resource-bundles" version="2" release="20.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-resource-bundles-2-20.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-resource-bundles-2-20.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">20c5f3b81e406510c2351f21c6428028c2cb40fa22b5bbc27b81ac47561dd228</sum>
        </package>
        <package name="glassfish-annotation-api" version="1.2" release="13.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-annotation-api-1.2-13.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-annotation-api-1.2-13.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">22a3737a7d2026f3510ea074ad874e6606dd6a15c0b38a2cec81ef66669be1f5</sum>
        </package>
        <package name="plexus-i18n" version="1.0" release="0.11.b10.4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-i18n-1.0-0.11.b10.4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-i18n-1.0-0.11.b10.4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">22d5cf5ff2559a9b343bbdec58688ff97fd5e0ed16ed20e60798adbd0a0892a4</sum>
        </package>
        <package name="javacc-maven-plugin-javadoc" version="2.6" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javacc-maven-plugin-2.6-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javacc-maven-plugin-javadoc-2.6-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">231630e42777c7ed270ec24b335edc7bb0ed262d2969835d311305713e94a4d1</sum>
        </package>
        <package name="ant-testutil" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-testutil-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">24868d2bcfbf165e10362a38289dbf2e9207a1d757ac7819bf81413e32483cb7</sum>
        </package>
        <package name="felix-osgi-compendium-javadoc" version="1.4.0" release="26.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-osgi-compendium-1.4.0-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-osgi-compendium-javadoc-1.4.0-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">24c9b1ff9858e350926c903be0a34ddf20bb1d75ab3c7b7afbf678ce348c8a06</sum>
        </package>
        <package name="objenesis-javadoc" version="2.6" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="objenesis-2.6-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/objenesis-javadoc-2.6-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2504d637f01a1809da1bc63ba6ee4bfb477b072990aa3c810676323c2f1c8f6d</sum>
        </package>
        <package name="plexus-cipher-javadoc" version="1.7" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-cipher-1.7-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-cipher-javadoc-1.7-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2507b6466cee787d5095480eab7117b7d95436fcf43662ecc34cc442dbdb32b3</sum>
        </package>
        <package name="xalan-j2-demo" version="2.7.1" release="38.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xalan-j2-2.7.1-38.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xalan-j2-demo-2.7.1-38.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2569631c49830a870fc4193b788ec96853b66561f033f13319b42f9ff85c6563</sum>
        </package>
        <package name="xz-java-javadoc" version="1.8" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xz-java-1.8-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xz-java-javadoc-1.8-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">25d5dd3faf1e6fb829866ed1f18379bbf11f1c1a26c2fdfdf7538ac973551867</sum>
        </package>
        <package name="maven-resolver-util" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-util-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">25effa4cb18b5b87c7c0e7dbfb216a8e3a48d7677bfd8b38d19521e66e606430</sum>
        </package>
        <package name="plexus-sec-dispatcher-javadoc" version="1.4" release="26.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-sec-dispatcher-1.4-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-sec-dispatcher-javadoc-1.4-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">262815d9f9eef73bf488e1e6c5d1295efb022137b91d780925a52a16ccdb5955</sum>
        </package>
        <package name="regexp" version="1.5" release="26.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="regexp-1.5-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/regexp-1.5-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2643e9a0fc8fb309237e8e597d6839eda83466887237ba7affe03455114ae893</sum>
        </package>
        <package name="cglib" version="3.2.4" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cglib-3.2.4-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/cglib-3.2.4-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">27a5ab24de2d81dfa5f90e656582287c2f9e02f4373fd3adf3693259761c704e</sum>
        </package>
        <package name="maven-doxia-tests" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-tests-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">28337b148a36bd0e75f712e7ea93b37e2e10d499b644387e8b11ea20e8330b56</sum>
        </package>
        <package name="maven-doxia-module-confluence" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-confluence-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">284c6586cad3c2a015839cbb392efec1e7fbfa24792f7d695fc2086c4f1e54f3</sum>
        </package>
        <package name="assertj-core" version="3.8.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="assertj-core-3.8.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/assertj-core-3.8.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2899a1afb8f49fcb71a0e1c995152b6c213cbc1a9db0b200117da78ff9ec803e</sum>
        </package>
        <package name="geronimo-jms-javadoc" version="1.1.1" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-jms-1.1.1-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-jms-javadoc-1.1.1-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">28ca2b5b9c226cdac5205e9e843d9501f7e17c4fbc63b01807bfea684992d9e2</sum>
        </package>
        <package name="aqute-bnd-javadoc" version="3.5.0" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="aqute-bnd-3.5.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/aqute-bnd-javadoc-3.5.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2900f7af7b19c1f0a5cb6c0e816a43b67b113485dc5df6e63f5a12a9a18a2577</sum>
        </package>
        <package name="powermock-api-mockito" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-api-mockito-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">292e16ba0d7573f8723ba29cdcf76ae2fedbc24392e56b857f99410a53636723</sum>
        </package>
        <package name="ant-apache-regexp" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-regexp-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2980d5ad08c82fa0164bc6f7b3741dad465644dbf1d161be7553b357ebc4742b</sum>
        </package>
        <package name="sonatype-oss-parent" version="7" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="sonatype-oss-parent-7-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/sonatype-oss-parent-7-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2b0683e7c83319e62108f9e089c6b70a0f6826ec23171c1ec0398f5df0890b8e</sum>
        </package>
        <package name="glassfish-el-api" version="3.0.1" release="0.7.b08.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-el-3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-el-api-3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2b39bd100d4664fc850976d6fefe5b2f8d5ee81e2bf2e7c39155d3bed87f8655</sum>
        </package>
        <package name="maven-failsafe-plugin" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-failsafe-plugin-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2bcde2610a5b7a6c28b740d790e701b158a6e978fcd993382c04156ccc4cc97d</sum>
        </package>
        <package name="jtidy-javadoc" version="1.0" release="0.28.20100930svn1125.module_el8.0.0+6004+2fc32706" epoch="2" arch="noarch" src="jtidy-1.0-0.28.20100930svn1125.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jtidy-javadoc-1.0-0.28.20100930svn1125.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2c3180b6bd1e6054b964c5809ef845edbaff385b2a6e010f28cd83c97db230f2</sum>
        </package>
        <package name="maven-doxia-module-docbook-simple" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-docbook-simple-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2d021e9b250827191f2df1b587682763c424937f9c7474ac5b8db6d763a6f078</sum>
        </package>
        <package name="jflex" version="1.6.1" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jflex-1.6.1-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jflex-1.6.1-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2d38e01f23e32c7f3cf674618bf9f10a62df916ab6fc6ee38c7c72632b503bec</sum>
        </package>
        <package name="maven-hawtjni-plugin" version="1.16" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hawtjni-1.16-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-hawtjni-plugin-1.16-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2d588df5307f53a0bad67286712476fd5902a99398105edf897f564c6c8dc7ce</sum>
        </package>
        <package name="osgi-annotation-javadoc" version="6.0.0" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="osgi-annotation-6.0.0-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/osgi-annotation-javadoc-6.0.0-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2ddd110711736e1564511ea7de3c7b27976277cd0e5d9c825bf5bcaaad338676</sum>
        </package>
        <package name="mockito-javadoc" version="1.10.19" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="mockito-1.10.19-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/mockito-javadoc-1.10.19-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2de02eaf5f0979e4a790888b04bb749f0c9071ee2574d976d2759d23c7402164</sum>
        </package>
        <package name="objectweb-asm-javadoc" version="6.2" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="objectweb-asm-6.2-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/objectweb-asm-javadoc-6.2-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2de24384a9c0b7f7d83a27b0fa35939e14fec509b79743701b70dfde68be3225</sum>
        </package>
        <package name="jansi-native" version="1.7" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="aarch64" src="jansi-native-1.7-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jansi-native-1.7-7.module_el8.0.0+6004+2fc32706.aarch64.rpm</filename>
          <sum type="sha256">2e8d28e1a88b7016c2691b033f59685f98d00ff85940b475c074ac9e874245cf</sum>
        </package>
        <package name="maven-clean-plugin" version="3.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-clean-plugin-3.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-clean-plugin-3.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">2f24c6cdddbec353330b05fbac1d4950da7852ff1b370fd0e4fbfb690eff5388</sum>
        </package>
        <package name="maven-script-ant" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-script-ant-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">300930af4496a8c58d7c74ba10bde6ba2289d5b3e3bfc5b2bfea0d60c197c71a</sum>
        </package>
        <package name="maven-doxia-modules" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-modules-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3232a9df24fc75b458f1183d8be240434863a225d6a96f5c457f32037631ba54</sum>
        </package>
        <package name="jcl-over-slf4j" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jcl-over-slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">327e54fe423b031d3b3bccc8d1d472977d15c6e5ebbaed5eecddfd2d898c8807</sum>
        </package>
        <package name="guava20-testlib" version="20.0" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="guava20-20.0-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guava20-testlib-20.0-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">32f0215c1c7e686d14a461541bbaf5a44ce3c2a80f7886391aeac4167399100b</sum>
        </package>
        <package name="cdi-api" version="1.2" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cdi-api-1.2-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/cdi-api-1.2-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">332d8cdd72f4d7d55f426b856d7b7b2c5b95bc4d27dc30546227085df34d7dc8</sum>
        </package>
        <package name="maven-antrun-plugin-javadoc" version="1.8" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-antrun-plugin-1.8-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-antrun-plugin-javadoc-1.8-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">341239620f7d76a318c44fa8c6481d5f7f9d4ed149bc2ad82c0d4098aecd028a</sum>
        </package>
        <package name="log4j-over-slf4j" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/log4j-over-slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">341d11d1dccd77aa9542f0b0cc81106f1dd1547a1138ba755efd82961631fafd</sum>
        </package>
        <package name="jzlib-javadoc" version="1.1.3" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jzlib-1.1.3-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jzlib-javadoc-1.1.3-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">34b5b4f8edc7112d7d29c22010bbd82e4a42c8a704658bd5880d7cbdac54b24c</sum>
        </package>
        <package name="maven-filtering-javadoc" version="3.1.1" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-filtering-3.1.1-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-filtering-javadoc-3.1.1-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">34bd9204859722d562fa50329d490bc6e0c7b5bbe8fef842a42cb8dfa965e3a6</sum>
        </package>
        <package name="maven-surefire" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">385b8b8b788467d115c128ff0b2cd198a02ac41807ffcc6c079eea48dc081aa4</sum>
        </package>
        <package name="sonatype-plugins-parent" version="8" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="sonatype-plugins-parent-8-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/sonatype-plugins-parent-8-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3a39661815bca5fe9ea579852c04bcfa4ffea385a9a59166116982593273315d</sum>
        </package>
        <package name="qdox-javadoc" version="2.0" release="3.M9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="qdox-2.0-3.M9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/qdox-javadoc-2.0-3.M9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3b68a81e1a031b7b635eb9f5d9ff231573de5f0a1c46702b011f24c035263bec</sum>
        </package>
        <package name="plexus-utils-javadoc" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-utils-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-utils-javadoc-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3ba24bc91717f35d3b090b860e809caef8bc09cb3431ebd7f288713da1ebfa90</sum>
        </package>
        <package name="sisu-plexus" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-plexus-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">3bdc5b844b321b8b0ea52eea40909491b3cb4b493ebe2444f94037db2e6f78f9</sum>
        </package>
        <package name="osgi-annotation" version="6.0.0" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="osgi-annotation-6.0.0-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/osgi-annotation-6.0.0-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3c3d030d16b540dffada2d9d723065a4bc8361d4a776dd05571c460be8151945</sum>
        </package>
        <package name="jdependency" version="1.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdependency-1.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdependency-1.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3c4641690e1848eb49a2484f2d229fb5d12bbf3dabd7d8b486d644644ad9c977</sum>
        </package>
        <package name="ant-manual" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-manual-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3dc5509c071fe08f4b8b1f1b3e7dcb002b288d42fb4a13aa7cc59cd9f086d365</sum>
        </package>
        <package name="ant-swing" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-swing-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">3ead11ee70360d0e4260232235ec729a2df820e057c75889cf6a161d693097fe</sum>
        </package>
        <package name="maven-dependency-analyzer" version="1.8" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-dependency-analyzer-1.8-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-dependency-analyzer-1.8-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4081e33439710b1e5e9f73808b7423e01e5dec1a841febca67ccfe860267a0b0</sum>
        </package>
        <package name="maven-resolver-connector-basic" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-connector-basic-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">418fcbcaacc4cabb0b609e8d3657ac34aabe2fb6a6ba73074bf10c2a85652265</sum>
        </package>
        <package name="apache-commons-logging-javadoc" version="1.2" release="13.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-logging-1.2-13.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-logging-javadoc-1.2-13.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">41c6182377ac9faf761aad1d9cb17eb53e14637b3f9ecc880ba8d2c11ef41dcf</sum>
        </package>
        <package name="plexus-archiver-javadoc" version="3.6.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-archiver-3.6.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-archiver-javadoc-3.6.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">41f07c8ac7934b61593ec15300f5b7f7a386297eaf81d84a93468d06efab962e</sum>
        </package>
        <package name="maven-toolchain" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-toolchain-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">425a2ba5bb552a61d43aea0d75730965ad959c7460a5658aacaeaddff30f9893</sum>
        </package>
        <package name="slf4j-javadoc" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-javadoc-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">434ef0dacb68fd98eaa1651196fa3a75197a4231379860937bedb8d81eafdfdf</sum>
        </package>
        <package name="log4j12-javadoc" version="1.2.17" release="22.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="log4j12-1.2.17-22.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/log4j12-javadoc-1.2.17-22.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">43f0178dc3dc1f58163ae6061839977ac0defc286007210c1d63350dc4684ec6</sum>
        </package>
        <package name="jsr-305" version="0" release="0.22.20130910svn.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jsr-305-0-0.22.20130910svn.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jsr-305-0-0.22.20130910svn.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">44d3b85a0ccd3b4196f6c1a4ec80a2b76da66b50c3a6f67bdfd28fb5385a2c77</sum>
        </package>
        <package name="xmvn-bisect" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-bisect-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">45d6f6f9d635bac6cdc651448461e650ecced455450022a04c8e453f679973c6</sum>
        </package>
        <package name="jaxen" version="1.1.6" release="18.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jaxen-1.1.6-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jaxen-1.1.6-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">45ec8543ddb36beb110d0bb803b6e2584516f4fbbda0ec52e3c0c61287253c84</sum>
        </package>
        <package name="jzlib-demo" version="1.1.3" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jzlib-1.1.3-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jzlib-demo-1.1.3-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4606b9f94db6b02b73b1cf41d73cc4fdb8b992d2a9b3424852e358452ae94ff4</sum>
        </package>
        <package name="maven-file-management-javadoc" version="3.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-file-management-3.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-file-management-javadoc-3.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">461b707dbb841776676344d2c3de082ffa16a3019ac35b915fef7bd62c56025d</sum>
        </package>
        <package name="maven-remote-resources-plugin" version="1.5" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-remote-resources-plugin-1.5-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-remote-resources-plugin-1.5-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">464a135cefe679937e723692f191a17d9621d1c56471a7cad23948b7ac65d155</sum>
        </package>
        <package name="testng" version="6.14.3" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="testng-6.14.3-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/testng-6.14.3-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">466e897aadab65768995a285d985f6a1ce2e3ef3309c6bb7b8e64788185cae4d</sum>
        </package>
        <package name="apache-ivy" version="2.4.0" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-ivy-2.4.0-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-ivy-2.4.0-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">46aae83c735f23e78e1ecb519c8413989704e891310002d81936b088c8f1c554</sum>
        </package>
        <package name="plexus-interactivity-javadoc" version="1.0" release="0.27.alpha6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-interactivity-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-interactivity-javadoc-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">475f18a9425ce32cdf152bd1d317dae8896eadd2946b6ec04b493b3e6783ee24</sum>
        </package>
        <package name="maven-resolver-test-util" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-test-util-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4a26f438a8235e888a7a521d321bdef22f5547606aec85e6049555a0566046de</sum>
        </package>
        <package name="xmvn-api" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-api-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4cb332b9e2811d94c5a4cbfcde515732b179c563b01d43c08f4f575cce1ae9ab</sum>
        </package>
        <package name="maven-plugin-tools-beanshell" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-beanshell-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4d9cd36d98dad077e953d126f11a87fbe820af4d11c4f9916ca7cd2925b39a30</sum>
        </package>
        <package name="maven-script-interpreter" version="1.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-script-interpreter-1.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-script-interpreter-1.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4e0207af22dc685ad47cda1cb155591da5af4be1e275ec4f7799f0f1c7b0fb17</sum>
        </package>
        <package name="plexus-component-api" version="1.0" release="0.24.alpha15.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-component-api-1.0-0.24.alpha15.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-component-api-1.0-0.24.alpha15.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4e7e6c6550c4d33c1a2c877fc178e23311791993d479f3ec6a3b883a724a502f</sum>
        </package>
        <package name="maven-file-management" version="3.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-file-management-3.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-file-management-3.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4f673789d46352a59e63f7d799466f69e13479075fe05bde3dba4ed40dc2bf35</sum>
        </package>
        <package name="glassfish-annotation-api-javadoc" version="1.2" release="13.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-annotation-api-1.2-13.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-annotation-api-javadoc-1.2-13.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">4f956ae242ce3523f17d4a17261d5fc2787f5d825ff77a087ed4673f2e64a053</sum>
        </package>
        <package name="javassist-javadoc" version="3.18.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javassist-3.18.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javassist-javadoc-3.18.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5085f4d8b16c3e6d174ca95f99aa2757d9b8c082e2864b4b56d07287ba0ab04e</sum>
        </package>
        <package name="maven-reporting-api-javadoc" version="3.0" release="14.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-reporting-api-3.0-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-reporting-api-javadoc-3.0-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">508676a8a2128b39770a3819f45099fff1f22f4428f803447f1463d4ad4d53a7</sum>
        </package>
        <package name="xerces-j2" version="2.11.0" release="34.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xerces-j2-2.11.0-34.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xerces-j2-2.11.0-34.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">50b0673cb2da67c626b7fddafca1f5886a54be8da8ca1625173c0aa5d7256dc3</sum>
        </package>
        <package name="os-maven-plugin" version="1.2.3" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="os-maven-plugin-1.2.3-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/os-maven-plugin-1.2.3-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">52ee57347ba7f5c89c93706abca7f383f0ccb33c11b4ca88ab4741f25588d871</sum>
        </package>
        <package name="maven-install-plugin" version="2.5.2" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-install-plugin-2.5.2-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-install-plugin-2.5.2-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">53d35c54232c7a544b60ce87a9b3543ba8c3c29bb21c3e13efc94ba56dc8b418</sum>
        </package>
        <package name="apache-commons-lang" version="2.6" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-lang-2.6-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-lang-2.6-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">543f9c0bf56efd8c3b2a413edb7358f0b043ffd1593c31ed759d4e31faaa7472</sum>
        </package>
        <package name="guice-throwingproviders" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-throwingproviders-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">552fb4dfba2e6ec3e1e02bc1edcce4ba1e96efd5522dba3b779b682b0e9ece59</sum>
        </package>
        <package name="java_cup-javadoc" version="0.11b" release="8.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="java_cup-0.11b-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/java_cup-javadoc-0.11b-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">55a098d6946cd96ae03b1d10a0defe12d13bb32164c180dd1b80f9798d1964fd</sum>
        </package>
        <package name="plexus-io-javadoc" version="3.0.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-io-3.0.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-io-javadoc-3.0.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">55adfdf9bd4fe337c396212a9cbdaa22819d0af1818149dbb43b5902cd7107fd</sum>
        </package>
        <package name="xerces-j2-demo" version="2.11.0" release="34.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xerces-j2-2.11.0-34.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xerces-j2-demo-2.11.0-34.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">564898eaebabd4d8190218e7d9898ae6d0e5c6e6c1c8ea9eb1f5332a02f628a5</sum>
        </package>
        <package name="maven-assembly-plugin" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-assembly-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-assembly-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">56bfa67c19d8e5496fd1adda11bb0bdd6505ca7dd639910572e9b1ccf91f1672</sum>
        </package>
        <package name="plexus-bsh-factory" version="1.0" release="0.19.a7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-bsh-factory-1.0-0.19.a7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-bsh-factory-1.0-0.19.a7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">57692be840aebfdc9968739a0b5a23b6abaa4309fdb5ca9bb0ee49d204f9d6a6</sum>
        </package>
        <package name="jline" version="2.14.6" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jline-2.14.6-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jline-2.14.6-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">577b0b1a7d7046abd2b613a0f415f938ef2372249e2418468391965ef675e2dc</sum>
        </package>
        <package name="glassfish-master-pom" version="8" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-master-pom-8-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-master-pom-8-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">594072a9559f0a091ebd73048829aa4b5faa13c4ecce4e2364eef5232d102e9c</sum>
        </package>
        <package name="maven-reporting-impl-javadoc" version="3.0.0" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-reporting-impl-3.0.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-reporting-impl-javadoc-3.0.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5a40a488221a6b7de325734b4ef94a4ec21e8855bdb9cabcb1f2ca3dd9634772</sum>
        </package>
        <package name="xmlunit" version="1.6" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmlunit-1.6-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmlunit-1.6-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5a87111e6238703412d71e9d254d6cc5a6cd119a5e7f55b9d6be45823f28abd1</sum>
        </package>
        <package name="maven-jar-plugin" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-jar-plugin-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-jar-plugin-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5ab201fe6fc4c7cbb3e92f3daf3b744c56153de4193c45d3e85e9922512bd848</sum>
        </package>
        <package name="felix-osgi-compendium" version="1.4.0" release="26.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-osgi-compendium-1.4.0-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-osgi-compendium-1.4.0-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5b02a6c8ee179c81ff1121c585a53480790fb2226a65738442921c943b186743</sum>
        </package>
        <package name="xalan-j2-xsltc" version="2.7.1" release="38.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xalan-j2-2.7.1-38.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xalan-j2-xsltc-2.7.1-38.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5c2ec82947b4d5a799278beff937019a62f1c743e2ddf66226643e932c7e885f</sum>
        </package>
        <package name="javacc" version="7.0.2" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javacc-7.0.2-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javacc-7.0.2-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5e1265df6be7e5c6a21210c3446f94fac4bc3e934be959e522f9dfdbc050e1b2</sum>
        </package>
        <package name="xmvn-core" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-core-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5e3e638125dcffca76b0c72e5f5b2cf7680546ddd82c21934547591e3e7b4df8</sum>
        </package>
        <package name="maven-clean-plugin-javadoc" version="3.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-clean-plugin-3.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-clean-plugin-javadoc-3.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5e8e688a79c77638763717ce90eb37537f2ead6e9cc8364b5c51a8ed97add5b8</sum>
        </package>
        <package name="powermock-api-easymock" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-api-easymock-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5f7727d102da94bafeb3a696cc04e807dfe097e7c3e27c5e7216b840d33aa694</sum>
        </package>
        <package name="mojo-parent" version="40" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="mojo-parent-40-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/mojo-parent-40-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">5ffa445e688ad3ee47c5fc897ac8ba159752e5b6176287472422c31028bee262</sum>
        </package>
        <package name="aqute-bnd" version="3.5.0" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="aqute-bnd-3.5.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/aqute-bnd-3.5.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">60d940a453b33ff6aac1ffec9266a5a93bf7a0b741af0e2f4ee15c9817e271de</sum>
        </package>
        <package name="maven-reporting-impl" version="3.0.0" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-reporting-impl-3.0.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-reporting-impl-3.0.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">614014610a1fc0760836e812508a7efa88fe55cbde70510b451af26cd62f3fa4</sum>
        </package>
        <package name="junit" version="4.12" release="9.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="junit-4.12-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/junit-4.12-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">615f6758086543bddfa9e9fac258542c6f3f13d3d303577eab1b12add4ecf821</sum>
        </package>
        <package name="javamail-javadoc" version="1.5.2" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javamail-1.5.2-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javamail-javadoc-1.5.2-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">61f160bae27cfa3149c57469c6931fa5ef22a5f2054cf9f85f5cce97239f2be9</sum>
        </package>
        <package name="plexus-compiler-pom" version="2.8.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-compiler-2.8.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-compiler-pom-2.8.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">620d2ab698f2e4a68b0b4ef71aecc74f416644e47d20777be84b0870ad37da31</sum>
        </package>
        <package name="apache-commons-net" version="3.6" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-net-3.6-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-net-3.6-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">62acc6a189b3b4012da21a019476da3e457db15426cd36100f2492fac1a7ac1a</sum>
        </package>
        <package name="ant-junit" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-junit-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">62bf9b685fbf3a706b2427feb9c055368ed6f57db2fba18ddde02e9c25f3f097</sum>
        </package>
        <package name="maven-surefire-provider-testng" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-provider-testng-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">63d93f8388f120836425866f0a1264940655171dd113821623f82b5a221a37f1</sum>
        </package>
        <package name="maven-doxia-sink-api" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-sink-api-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">63fc0cf6914b0d20d50425b9a039df214d9c2dab7c6e2bb96eabb43f017ae48e</sum>
        </package>
        <package name="powermock-common" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-common-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">64205225a1c7e26a748f2588ca27e1eec2b2ab5a012aa86f04ce12a9f1be32cf</sum>
        </package>
        <package name="httpcomponents-core-javadoc" version="4.4.10" release="4.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="httpcomponents-core-4.4.10-4.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>httpcomponents-core-javadoc-4.4.10-4.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">6475f53ff2e0165157e4246f0406d6ba3cf44bc991961e577885f1c6ee5f1d8a</sum>
        </package>
        <package name="apache-commons-lang3-javadoc" version="3.7" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-lang3-3.7-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-lang3-javadoc-3.7-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6484ad02ab0df16325e315c21e5e12e22da8e719da6a328ce82ffb7ed8b0fe59</sum>
        </package>
        <package name="maven-script-interpreter-javadoc" version="1.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-script-interpreter-1.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-script-interpreter-javadoc-1.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">64f420eb1662d5d1a0720f163cc9631116ecb0f767d9444d8bbb1ec44182418a</sum>
        </package>
        <package name="javapackages-local" version="5.3.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javapackages-tools-5.3.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javapackages-local-5.3.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">651bd4d2ed7fbf202dbd379224f48857b4eb2ae9646de3a88a50ec352fa1635f</sum>
        </package>
        <package name="google-guice-javadoc" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/google-guice-javadoc-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">653b9dc339ef6508498dd07d7f905b48006e1c05f0c74e1546c23a24e4d381c0</sum>
        </package>
        <package name="xmvn-subst" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-subst-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">656abfa15ad47900cbb6f27621cef1e72242bac9e855584cbcd7041a466f47d7</sum>
        </package>
        <package name="felix-parent" version="4" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-parent-4-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-parent-4-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">65a45a7dbf720a40180c04f4e2b931b83ad2193da0da53889e437bc9744e1f2e</sum>
        </package>
        <package name="maven-filtering" version="3.1.1" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-filtering-3.1.1-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-filtering-3.1.1-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">65e016f483a90b7d6bfef80c19b88a1ce417ffbe13d3f113636e58676a3faa1b</sum>
        </package>
        <package name="maven-plugins-pom" version="28" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugins-pom-28-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugins-pom-28-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">65eb843f22dc6f0137803c21975e9e7d116c405d7915d952a8cf941c8365d2a1</sum>
        </package>
        <package name="maven-source-plugin" version="3.0.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-source-plugin-3.0.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-source-plugin-3.0.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">66083a85cfdab286b070f976b9386ce1c8182c3b45ae018957471f0d739062fc</sum>
        </package>
        <package name="maven-surefire-javadoc" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-javadoc-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">66cb5070f79d41e8ccbe1ae9c74e371b7698dfffaf06e4be02b73e5f19f9d6de</sum>
        </package>
        <package name="ant-antlr" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-antlr-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6753a35229ca10dcacb5451a039a4c46b9d47281c31c1c9891075d0e472dcf52</sum>
        </package>
        <package name="bcel" version="6.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bcel-6.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bcel-6.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">685bc29d37f1fb4078ad204b27942d0e2600bf9a99cee8489bd9c276be99c9db</sum>
        </package>
        <package name="maven-dependency-plugin" version="3.0.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-dependency-plugin-3.0.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-dependency-plugin-3.0.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">686901a9ee848115d151999fb6f09002404591387ce28e85d41dc97e3b6953ef</sum>
        </package>
        <package name="maven-plugin-build-helper" version="1.9.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-build-helper-1.9.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-build-helper-1.9.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">692395e72695219e200ce64b918bf67a82d8b247feaa58d27dc02bb271d52c45</sum>
        </package>
        <package name="plexus-containers-component-metadata" version="1.7.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-containers-component-metadata-1.7.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6a13a91c98d8c43d41f5e333bc31f672e67bc146cf437a4942f808b9e393ae6f</sum>
        </package>
        <package name="plexus-containers-component-annotations" version="1.7.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-containers-component-annotations-1.7.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6a5d14b342d4ca989276915cd170e45c1e34948e4b24959a3ac11cbbf179dc47</sum>
        </package>
        <package name="geronimo-annotation" version="1.0" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-annotation-1.0-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-annotation-1.0-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6ac879d28c39ed23d97b191f7b7d55fad97a763a7ac5d02b82cad968755b3263</sum>
        </package>
        <package name="jsoup" version="1.11.3" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jsoup-1.11.3-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jsoup-1.11.3-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6b38c85f8e5ee3b240ac4bed9692f7ba39cedec3e5e11336d9fafb76cf6a4786</sum>
        </package>
        <package name="osgi-compendium" version="6.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="osgi-compendium-6.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/osgi-compendium-6.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6b790ec299579d27dc0c0e06bcb9d58b2a8f60b3897ae774beae648188ee61ba</sum>
        </package>
        <package name="objenesis" version="2.6" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="objenesis-2.6-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/objenesis-2.6-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6bca367eac4471bd6a1afdd8acfe6b0d492fa5efc19230e2746fe8cb3429782f</sum>
        </package>
        <package name="maven-resolver-transport-http" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-transport-http-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6bead85bf0878d6d87d7029af4efb48775e90e410dfb0f83eb4c7f2550870d09</sum>
        </package>
        <package name="hamcrest-javadoc" version="1.3" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hamcrest-1.3-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hamcrest-javadoc-1.3-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6caba5302a286f369b3ddbba1833346d6b4933764818d113a00575f173c32b5d</sum>
        </package>
        <package name="guice-multibindings" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-multibindings-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6d07c063220c58709837b1eb2453447b4a3778cbac583f709d8e67332d3d5dcb</sum>
        </package>
        <package name="maven-parent" version="27" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-parent-27-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-parent-27-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6d81257afb372ecbd18a3a0701e62ebd691e1f81ec5d0f1fdfc55199f82c4761</sum>
        </package>
        <package name="aopalliance-javadoc" version="1.0" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="aopalliance-1.0-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/aopalliance-javadoc-1.0-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6da6c561ee809f9623bc7981ec8300e792e0feca5d50afdd347f4326d805348c</sum>
        </package>
        <package name="apache-parent" version="19" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-parent-19-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-parent-19-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6e4b7505901e00bf370e11fdb863f920875272b8b01da57a51024eed64049713</sum>
        </package>
        <package name="weld-parent" version="34" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="weld-parent-34-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/weld-parent-34-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6e53cd4f0d748b9478714c7f1ed56b7a0914559f886f5ef161ded512d7332c5b</sum>
        </package>
        <package name="geronimo-parent-poms" version="1.6" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-parent-poms-1.6-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-parent-poms-1.6-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6efbc89ac1a85649c2aeecfee2d29d9b78f92904da7b7622cfa4d29e36e9f028</sum>
        </package>
        <package name="hamcrest-core" version="1.3" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hamcrest-1.3-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hamcrest-core-1.3-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6efdf4e7fa9106bd51cad3fb18a10e80ba82137f13619a26bec9171c07c7e5c2</sum>
        </package>
        <package name="maven-reporting-api" version="3.0" release="14.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-reporting-api-3.0-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-reporting-api-3.0-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6f3824e5d589a5c741c6b039fb619fee0c52de1ff2585f8c863ac32250da3a50</sum>
        </package>
        <package name="maven-dependency-tree-javadoc" version="3.0" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-dependency-tree-3.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-dependency-tree-javadoc-3.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6f46f6a705f0db9321076b2c3cf42fbf04d2db651b4cd2a4c73d9274b754e9b5</sum>
        </package>
        <package name="assertj-core-javadoc" version="3.8.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="assertj-core-3.8.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/assertj-core-javadoc-3.8.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">6f690090b882cbd52e0aae5aac936575734d046de9092d3fdd6c54ada42e9f7f</sum>
        </package>
        <package name="exec-maven-plugin" version="1.6.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="exec-maven-plugin-1.6.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/exec-maven-plugin-1.6.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">708d3c41c167e0460331131f0d6e17f19deada0f383ff3d913a49b7ecf1709b0</sum>
        </package>
        <package name="maven-resolver-transport-classpath" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-transport-classpath-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">70b4e02fc5b66c3e56fc79bf95cab6544a69b639ebd1d759bc122916c5506ff7</sum>
        </package>
        <package name="powermock-javadoc" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-javadoc-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">71bc483edc364a7b4ccd5092ace8bec5db0bfd1832d4eb2b0526cd1370f6f4e1</sum>
        </package>
        <package name="plexus-components-pom" version="1.3.1" release="10.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-components-pom-1.3.1-10.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-components-pom-1.3.1-10.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">72b2cce3bebfdf79c4d91327089bd80d38854b4848afdefd608df20a17d3ded2</sum>
        </package>
        <package name="apache-commons-cli-javadoc" version="1.4" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-cli-1.4-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-cli-javadoc-1.4-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">72e5f30e0a7e9f78a3efae00c3f5ad6a4672372f057a4639b4e150e8310fcce8</sum>
        </package>
        <package name="jdepend-demo" version="2.9.1" release="18.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdepend-2.9.1-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdepend-demo-2.9.1-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7381616e3fe1742770063bfc5a86726e06cbfb05ed3b4b863ca5da767883bb3e</sum>
        </package>
        <package name="maven-enforcer" version="1.4.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-enforcer-1.4.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-enforcer-1.4.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7387e270a37df5cae583685451d68feb86ba3407728c662a96ac42c63cf78e8b</sum>
        </package>
        <package name="jzlib" version="1.1.3" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jzlib-1.1.3-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jzlib-1.1.3-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">74b329fa47a443197282499776cda3320ad18dbffa7473460f28e488175a16d5</sum>
        </package>
        <package name="apache-commons-logging" version="1.2" release="13.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-logging-1.2-13.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-logging-1.2-13.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">762e07dbd11358d5f9bbced5a98fa6e9ece7d25937b8a50bac0b76a462016e64</sum>
        </package>
        <package name="felix-osgi-foundation-javadoc" version="1.2.0" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-osgi-foundation-1.2.0-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-osgi-foundation-javadoc-1.2.0-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">76bad43c37afb6d501550e189c67acd75e40f09c93e429fa523e9f81a186b51d</sum>
        </package>
        <package name="jboss-interceptors-1.2-api" version="1.0.0" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jboss-interceptors-1.2-api-1.0.0-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jboss-interceptors-1.2-api-1.0.0-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">77040fd0d37c5d6e302b5a6f6fe346125c4d4cdaeb428410191eeb581624e57b</sum>
        </package>
        <package name="maven-shared-incremental" version="1.1" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shared-incremental-1.1-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-incremental-1.1-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">782805a9e85c18d0761a12d8ddf5d409e57c8f357987710c85cb908f24cb9db6</sum>
        </package>
        <package name="jakarta-commons-httpclient-javadoc" version="3.1" release="28.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="jakarta-commons-httpclient-3.1-28.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jakarta-commons-httpclient-javadoc-3.1-28.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">788501385c279ff13ed26a2d1fe34e30d69b813e66c5e7bdd3bec24632ab343a</sum>
        </package>
        <package name="guice-extensions" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-extensions-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7933d086f97a11be4c422cfbe31cbc59ff3601dda919eef8b7a04ad8da734a4a</sum>
        </package>
        <package name="powermock-core" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-core-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7a155ed5365b5ef9353914693e182e75230ed6e541990e21d50777bf48f710ec</sum>
        </package>
        <package name="maven-script-beanshell" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-script-beanshell-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7a16a86618f93381e3f2396f3b36ecd8680daf0ebfeeb34a16265e67205bcc12</sum>
        </package>
        <package name="ant-jmf" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-jmf-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7a42a933ba8f8f58e83cdbe9220a6f8d57133596f9f48f9c5872d523ad614d41</sum>
        </package>
        <package name="xmvn-parent-pom" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-parent-pom-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7a77a19cd14105bd0b9bed39ea524e4075c00d1b126cd52ff4654c40f3491cd9</sum>
        </package>
        <package name="glassfish-servlet-api" version="3.1.0" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-servlet-api-3.1.0-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-servlet-api-3.1.0-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7b438db96b1430b55836d046664c915670dccea67ce370d1d9766f36217bc23f</sum>
        </package>
        <package name="glassfish-jsp-api" version="2.3.2" release="0.9.b01.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-jsp-api-2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-jsp-api-2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7bca3f98264bd8e80634c7ef0d6e737006c60b7114755a43a742696ca23515e0</sum>
        </package>
        <package name="plexus-ant-factory-javadoc" version="1.0" release="0.20.a2.2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-ant-factory-1.0-0.20.a2.2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-ant-factory-javadoc-1.0-0.20.a2.2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7c1559dbc2d2c2c5fc3cf3b729c6044ba741fd5826d29abcf2aac3b1677a2365</sum>
        </package>
        <package name="maven-wagon-javadoc" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-javadoc-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7c47dd43ff46f1cdf6778c1aa3e56bfdf752e09f4ed168acd5428f84a79bb000</sum>
        </package>
        <package name="maven-doxia-module-fml" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-fml-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7d3f96212d914028106cc53cd74f6a646396d212d36b7f16c6012c6ff70a676d</sum>
        </package>
        <package name="xmvn-connector-aether" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-connector-aether-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7d5b8388b85504558c791c884ea9d6e50aa5795a96f5557415d812492da17346</sum>
        </package>
        <package name="antlr-tool" version="2.7.7" release="56.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="antlr-2.7.7-56.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/antlr-tool-2.7.7-56.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7d734d19f80a7de29460e13a2524f08c1a4250a586792ca39b55d32bfd1202c1</sum>
        </package>
        <package name="byaccj" version="1.15" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="aarch64" src="byaccj-1.15-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/byaccj-1.15-17.module_el8.0.0+6004+2fc32706.aarch64.rpm</filename>
          <sum type="sha256">7dec8a03540aefc56f0cc2539cee5142c7424331ed153848c741253828763ab1</sum>
        </package>
        <package name="xml-commons-apis-manual" version="1.4.01" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xml-commons-apis-1.4.01-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xml-commons-apis-manual-1.4.01-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7df665ab6ba692fbb9ee9c6ca8a71658657bf1f2150a72b306d427250874f376</sum>
        </package>
        <package name="javacc-manual" version="7.0.2" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javacc-7.0.2-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javacc-manual-7.0.2-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7e35af7fc5fa62127e864f175a9d94a11fbf4877528ed04573076a9e387cf75e</sum>
        </package>
        <package name="maven-project" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-project-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7e37867b631d8d90c0c6b3a136e357248a199910bde59152595be118985a335a</sum>
        </package>
        <package name="plexus-i18n-javadoc" version="1.0" release="0.11.b10.4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-i18n-1.0-0.11.b10.4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-i18n-javadoc-1.0-0.11.b10.4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7ec556779a9e330cdfc01e53f37c778bdf320b689c4101e582aa5ed86991fe0b</sum>
        </package>
        <package name="powermock-junit4" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-junit4-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">7f2a72044eabeefc2d236d88439844fbad43d922fd94b7e43ae0c412c5401677</sum>
        </package>
        <package name="plexus-languages" version="0.9.10" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-languages-0.9.10-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-languages-0.9.10-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">801d7d6f1e4222daadf5df7c3613c4855424bb45be0867a70114851304b04a6c</sum>
        </package>
        <package name="maven-shared-io" version="3.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-shared-io-3.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-io-3.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8174a5d4973d6053f531d9950b8db65adf2196bd8df315e141366f7951553a87</sum>
        </package>
        <package name="plexus-ant-factory" version="1.0" release="0.20.a2.2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-ant-factory-1.0-0.20.a2.2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-ant-factory-1.0-0.20.a2.2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">818e68b6630de1ea175b4b9c0ad2b6d97c0c9b8229a253ac010e5c687646290d</sum>
        </package>
        <package name="maven-artifact" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-artifact-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">81f8a5a5db07c227dc74367e78ca5d38e4688ef1ce29905a1e5c2c412adbb5c9</sum>
        </package>
        <package name="slf4j-sources" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-sources-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8358ebf087040169e277a244e5fca310f50ae110d80dcc78b9af626f12a413ba</sum>
        </package>
        <package name="maven-plugin-testing-harness" version="3.3.0" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-testing-3.3.0-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-testing-harness-3.3.0-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">835b7561defea26b280375c48ab87e52e22d78fd78e3637211d362359b905562</sum>
        </package>
        <package name="maven-plugin-tools-api" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-api-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">83d0c3c4a683c4736c1c9b67d3a69649c7341bcb05360f55d3d0ecd6272ff503</sum>
        </package>
        <package name="bcel-javadoc" version="6.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bcel-6.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bcel-javadoc-6.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">84bd0e3e4d1c9bee0bbf22bc941c0bd1b680545d9672ea413f1b35440668a470</sum>
        </package>
        <package name="sisu-mojos-javadoc" version="0.3.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="sisu-mojos-0.3.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/sisu-mojos-javadoc-0.3.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">84ee0b7006cfd68b5fd59591c1a723f6a35fe843610b56e3729ea311f27a0ea1</sum>
        </package>
        <package name="python3-javapackages" version="5.3.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javapackages-tools-5.3.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/python3-javapackages-5.3.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">85170d14a00d7aa1384c331a8ffb8e21fae50a3481bb3f9ee0c001cf95827a96</sum>
        </package>
        <package name="apache-commons-io-javadoc" version="2.6" release="3.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="apache-commons-io-2.6-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-io-javadoc-2.6-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">861a9c1cfbcf06a0e6c6d41e81b122c43d9f3c9b7ae5bf60ca447aceb4e204e5</sum>
        </package>
        <package name="ant-commons-net" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-commons-net-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">861b339c1184a8ee75740400d8f50ccec2cf10d323705b09796229e641cec6f7</sum>
        </package>
        <package name="javacc-javadoc" version="7.0.2" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javacc-7.0.2-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javacc-javadoc-7.0.2-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">86711953bcb0ef08e72f7aaf926b17060e090ea661d184c7276849f777206a9e</sum>
        </package>
        <package name="maven-plugin-registry" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-registry-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">87556e1a33339fd8e774189e5025fc7f434256c3ca783a4027b7959d6dc9fe01</sum>
        </package>
        <package name="maven-invoker-plugin-javadoc" version="1.10" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-invoker-plugin-1.10-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-invoker-plugin-javadoc-1.10-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">87a0f293eb655bf4ebefa7591afb5a8e3818e520eb8311a9cf0f1236bb35884e</sum>
        </package>
        <package name="xml-commons-apis" version="1.4.01" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xml-commons-apis-1.4.01-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xml-commons-apis-1.4.01-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">885e3133585c3c0c2ea93fcbb3c0d67d7cc06e36e48597ca2c7ac3e240e2dc97</sum>
        </package>
        <package name="maven-doxia-module-twiki" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-twiki-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">88be51c38e19e221764c974986e9fa21554edbb357a35cfbbd3fe0dce87a19dc</sum>
        </package>
        <package name="ant-xz" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-xz-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">895fd7c5f23ea2a97f69d84a432854c72db475c6b9ef461024a3f7fc9c44560a</sum>
        </package>
        <package name="maven-doxia" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">896035e66358a936c6b5de9a7439d2b17b979b85a73fca57fc7ae7a988e99bc4</sum>
        </package>
        <package name="hawtjni" version="1.16" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hawtjni-1.16-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hawtjni-1.16-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8994f1ba01b4f8f0b68a1d5e8741b02bc8028048e0ecbbed97b40d6f62bd7c82</sum>
        </package>
        <package name="plexus-resources" version="1.0" release="0.23.a7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-resources-1.0-0.23.a7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-resources-1.0-0.23.a7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8a4651a74bb7ae6ebe2e330a0677a6854bacb4aefe6ca86ec92ddfe3762730ef</sum>
        </package>
        <package name="jline-javadoc" version="2.14.6" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jline-2.14.6-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jline-javadoc-2.14.6-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8c485bcbf75f897b6008b3c9729119dd48f6644d004a333242bff8d1034d813d</sum>
        </package>
        <package name="maven-plugin-testing-tools" version="3.3.0" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-testing-3.3.0-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-testing-tools-3.3.0-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8ccabee5df3119b88a4650c39faf2e63757d030af15131232218c51e5187b960</sum>
        </package>
        <package name="maven-doxia-module-apt" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-apt-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8d7ad6114bb942ff065896d4378dc6123503978bec5be65135979e9409c84e9c</sum>
        </package>
        <package name="jboss-interceptors-1.2-api-javadoc" version="1.0.0" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jboss-interceptors-1.2-api-1.0.0-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jboss-interceptors-1.2-api-javadoc-1.0.0-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">8de8d8967c572e6fbddd26567c37b2952089a9ddec1b4fb8929bdc925144b273</sum>
        </package>
        <package name="maven-artifact-transfer-javadoc" version="0.9.0" release="4.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-artifact-transfer-0.9.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-artifact-transfer-javadoc-0.9.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9001c676171a04231fd52d3b9845435eb1782c67c509d596fff73f7a0828f40b</sum>
        </package>
        <package name="xbean" version="4.8" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xbean-4.8-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xbean-4.8-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">90ab942f5809e4b69c3b166bb3f50983fbabdb5c2163a0e079707b868875cc8b</sum>
        </package>
        <package name="velocity" version="1.7" release="24.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="velocity-1.7-24.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/velocity-1.7-24.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">90aeebc03692ea3bc317ec4bc262128862db25e4625e34d91e77d8b81e06b0ba</sum>
        </package>
        <package name="plexus-compiler-javadoc" version="2.8.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-compiler-2.8.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-compiler-javadoc-2.8.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">90ec36e63e7a9cb16aede658a3afd3475c6188d33c182287b2bd5fef77dfd2bc</sum>
        </package>
        <package name="jaxen-demo" version="1.1.6" release="18.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jaxen-1.1.6-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jaxen-demo-1.1.6-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">917724cfa1ae490316db8d93327d0dea6ce4a6c11bacd2496d48393283c4c094</sum>
        </package>
        <package name="forge-parent" version="38" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="forge-parent-38-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/forge-parent-38-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">919f3c69137e9c443c2af1e71db8b06919931c5c766ec5a23eb2ec0f37eff23d</sum>
        </package>
        <package name="junit-manual" version="4.12" release="9.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="junit-4.12-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/junit-manual-4.12-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">921d8cd3d39e647dcae282e7bc59956ec7c763a6aa22a8c548beaf7702e6b1f5</sum>
        </package>
        <package name="jflex-javadoc" version="1.6.1" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jflex-1.6.1-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jflex-javadoc-1.6.1-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">927706e8bfddaff89b469d4eabbf30eeb710f3a8d9cdeb430a3cf6d12b55dd73</sum>
        </package>
        <package name="maven-wagon-http" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-http-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">933559166a85907ca1563139a08ba3ea6edf774f80d74ee62ee934ff9f9e9e45</sum>
        </package>
        <package name="velocity-manual" version="1.7" release="24.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="velocity-1.7-24.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/velocity-manual-1.7-24.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">93a76e8455b6fa76c57d808004016abd573be8ce87c806a87ae97f9bb0ff1489</sum>
        </package>
        <package name="plexus-containers-javadoc" version="1.7.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-containers-javadoc-1.7.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">962508ef02532db395d9b0604ec1aa52e3543939198e84033216ff7e04be7e87</sum>
        </package>
        <package name="bsf-javadoc" version="2.4.0" release="30.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bsf-2.4.0-30.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bsf-javadoc-2.4.0-30.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">96b7239b26eb6ca721f8379488cb56e78fd5a58ea0edd5c4dc0db5bf33b0ca2f</sum>
        </package>
        <package name="munge-maven-plugin-javadoc" version="1.0" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="munge-maven-plugin-1.0-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/munge-maven-plugin-javadoc-1.0-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">96c14d097ec5ea81ba52ca3c51af2ea98c5f8866e00df218a985f070a3f6eaec</sum>
        </package>
        <package name="maven-artifact-manager" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-artifact-manager-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">97066e8b0e37f6a3f30ad70015c5bfebb9d6f3175404e9eb9dbf8328e66aeebb</sum>
        </package>
        <package name="sisu-mojos" version="0.3.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="sisu-mojos-0.3.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/sisu-mojos-0.3.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">97130e2317f14975bc770e54d1d8e9c52b61a2d70db67ef72b3e204619c8d303</sum>
        </package>
        <package name="apache-commons-beanutils" version="1.9.3" release="5.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="apache-commons-beanutils-1.9.3-5.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>apache-commons-beanutils-1.9.3-5.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">975b6f7d2373d03ccfe9585f0c7432aa3dd6eb60d7a1570cce8c4793f297b572</sum>
        </package>
        <package name="maven-plugin-tools-javadocs" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-javadocs-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">97de0a794ba0f4c9913ee1fc13fa8655fb2061effeac6b75258517341f8e54c8</sum>
        </package>
        <package name="jakarta-commons-httpclient" version="3.1" release="28.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="jakarta-commons-httpclient-3.1-28.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jakarta-commons-httpclient-3.1-28.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">97fe3b0824f5ad74ade95a452c6fdb064f2abfd40eb635310dc01408ac07cff1</sum>
        </package>
        <package name="maven-enforcer-plugin" version="1.4.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-enforcer-1.4.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-enforcer-plugin-1.4.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">982427bff5b08c1dddfdd067c5834027044eba99b70b43519ea31c4ed74d765e</sum>
        </package>
        <package name="maven-verifier" version="1.6" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-verifier-1.6-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-verifier-1.6-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9853d251bf680a9dade08bfff65ec468a2fa3126ca09edc7fa4f3c66511e05cd</sum>
        </package>
        <package name="hawtjni-javadoc" version="1.16" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hawtjni-1.16-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hawtjni-javadoc-1.16-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">988886983ad2ee6440bf56efebcccbb7107f641f629d5982fa84dfbf1aa94f49</sum>
        </package>
        <package name="glassfish-el-javadoc" version="3.0.1" release="0.7.b08.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-el-3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-el-javadoc-3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">997dac1d08efd03bd2c0061e08c50e3b2bdd1e29ebb267c80c1900a40ace59f7</sum>
        </package>
        <package name="maven-compiler-plugin" version="3.7.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-compiler-plugin-3.7.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-compiler-plugin-3.7.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">99e2e3ad8015fad7241c60c85c6af16a491a9d5bc3a972fbf9bf87599a4b5841</sum>
        </package>
        <package name="apache-commons-compress" version="1.18" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-compress-1.18-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-compress-1.18-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">99e8ad27d655f18b55328a0de6389392123e6ea0340c5d133e8c7b1368df92ce</sum>
        </package>
        <package name="glassfish-jsp-api-javadoc" version="2.3.2" release="0.9.b01.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-jsp-api-2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-jsp-api-javadoc-2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">99fbb7ebe1d9b9c0ab62db63700bf2b4305b3f4546800ff749b357ef2b3804dc</sum>
        </package>
        <package name="plexus-cli-javadoc" version="1.6" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-cli-1.6-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-cli-javadoc-1.6-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9a3a4cdc28491e34b99dca31ce668ff20e7e97e7a896f87766444a6ea89b1e70</sum>
        </package>
        <package name="slf4j-jdk14" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-jdk14-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9a55245852f25f2e59f74e2605c685cce533a183404674a3a38673dddf811cdc</sum>
        </package>
        <package name="xml-commons-resolver" version="1.2" release="26.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xml-commons-resolver-1.2-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xml-commons-resolver-1.2-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9ab0f4ab5306ae346f664c33bdae6068ae90aee8082d4f89150fedb4a54ecc53</sum>
        </package>
        <package name="geronimo-annotation-javadoc" version="1.0" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-annotation-1.0-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-annotation-javadoc-1.0-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9afdeca4403ab0af2e29d2c6cb299dbf822c930912f4f2f0f855b26284d5057c</sum>
        </package>
        <package name="hamcrest-demo" version="1.3" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hamcrest-1.3-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hamcrest-demo-1.3-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9bfc72771e47e7824cb455a810e00a24fd22aa6c0976572428d4984f5d9cd062</sum>
        </package>
        <package name="xml-commons-apis-javadoc" version="1.4.01" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xml-commons-apis-1.4.01-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xml-commons-apis-javadoc-1.4.01-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9d02ec2cc2e0640eb56c734fe0e33a503395f9b19ecad377ae66665be95c0b23</sum>
        </package>
        <package name="velocity-javadoc" version="1.7" release="24.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="velocity-1.7-24.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/velocity-javadoc-1.7-24.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9e55b87bbc11100cd9a36b09b23a9387f62699f7a782384c0e3da40c78d93874</sum>
        </package>
        <package name="maven-shade-plugin" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shade-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shade-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9eac325f317a4bda743e321ba25d0804ebaa6555fbaa6321bce1ebbf3348ec87</sum>
        </package>
        <package name="jansi-javadoc" version="1.17.1" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jansi-1.17.1-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jansi-javadoc-1.17.1-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9ed837abebdc2c3f4bb585e86b7afbd5d15461421767767916e42da69d3c031d</sum>
        </package>
        <package name="jakarta-oro" version="2.0.8" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jakarta-oro-2.0.8-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jakarta-oro-2.0.8-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9edc95b5759acdd9388451b191eed042e84f3d003f283273638132efcbb4eb85</sum>
        </package>
        <package name="glassfish-servlet-api-javadoc" version="3.1.0" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-servlet-api-3.1.0-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-servlet-api-javadoc-3.1.0-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9f1a9402fd76f7f0a861b417451bb7ab76a7f40f5de9663f293659590e5ab5cc</sum>
        </package>
        <package name="ant-jdepend" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-jdepend-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9f55ccbceb97098a0dbee1bccb278791f1e1853e657540d3dc3c4a212a98deea</sum>
        </package>
        <package name="httpcomponents-project" version="9" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="httpcomponents-project-9-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/httpcomponents-project-9-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9f65ebeda841856cfc3113bbc3b15c72e72ae3050799434d33f55a88d141f270</sum>
        </package>
        <package name="guice-assistedinject" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-assistedinject-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9fcd7e063e2c47baac057076ac4e051e1a5276944e4051591dee370d60e28adb</sum>
        </package>
        <package name="osgi-core-javadoc" version="6.0.0" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="osgi-core-6.0.0-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/osgi-core-javadoc-6.0.0-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">9ff7348e7282752b24a4cd6cd087d9baf15950ce73ba395acf31615cf92292bd</sum>
        </package>
        <package name="maven-javadoc" version="3.5.4" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-3.5.4-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-javadoc-3.5.4-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a00b6bd8cd344bb703a84ab1d74dba85986ed5a87a75914796f2966053d8248d</sum>
        </package>
        <package name="apache-commons-compress-javadoc" version="1.18" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-compress-1.18-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-compress-javadoc-1.18-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a10fccdca09874c51d55ef420d28b48f6961aa89e2c9fb77c316c37090198209</sum>
        </package>
        <package name="beust-jcommander" version="1.71" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="beust-jcommander-1.71-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/beust-jcommander-1.71-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a1873824974f3d19f823f5d2170364950a77a45b149d496fe367c1aa3a0f9dcb</sum>
        </package>
        <package name="os-maven-plugin-javadoc" version="1.2.3" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="os-maven-plugin-1.2.3-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/os-maven-plugin-javadoc-1.2.3-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a1a60bff875b190c666935d065647b9522bfb35331777f36b03d64f110c31bd7</sum>
        </package>
        <package name="apache-commons-cli" version="1.4" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-cli-1.4-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-cli-1.4-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a1ce6329925837d21fe67cba6096522def6566172df64511031426aace758106</sum>
        </package>
        <package name="apache-commons-collections-javadoc" version="3.2.2" release="10.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-collections-3.2.2-10.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-collections-javadoc-3.2.2-10.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a2b9897b1027635dbe6e6e8a488db43b8c30961d6051c11eeec98bc5075c744a</sum>
        </package>
        <package name="plexus-resources-javadoc" version="1.0" release="0.23.a7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-resources-1.0-0.23.a7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-resources-javadoc-1.0-0.23.a7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a2bd36874cf7aa05173b17a2f20d0f3bb1f79d6c87fa88758c7a2b448650fe8c</sum>
        </package>
        <package name="maven-resources-plugin" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-resources-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resources-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a309c79fb7fa0267acf04e540010f3b9bd84f87f3a7dcfc84455b10dc43a448d</sum>
        </package>
        <package name="maven-plugin-tools-java" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-java-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a3446218a4d671920ef995bdfb99bdc6e8163f06e72a0e31a849e3824b875008</sum>
        </package>
        <package name="plexus-component-factories-pom" version="1.0" release="0.15.alpha11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-component-factories-pom-1.0-0.15.alpha11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-component-factories-pom-1.0-0.15.alpha11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a4fcc30b9001714c78fbf81e201a74f91d0a02c842625f9b8a6bc7189e689301</sum>
        </package>
        <package name="maven-wagon-providers" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-providers-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a5510adda0ccc1340e9c36bdf624ed0a80a2eb36427e27ac1f4fca29571ea568</sum>
        </package>
        <package name="httpcomponents-client" version="4.5.5" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="httpcomponents-client-4.5.5-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/httpcomponents-client-4.5.5-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a6452c4b4a8e6442c772335beb2d4634d16cfea6f0924e1570cfb0fd88a2a914</sum>
        </package>
        <package name="maven-enforcer-javadoc" version="1.4.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-enforcer-1.4.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-enforcer-javadoc-1.4.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a66d1cdd5bf342717bca34f194413b85d54ddef832e70f3c169446b90bd7f9e3</sum>
        </package>
        <package name="maven-plugin-plugin" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-plugin-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a698a1a3e85bf1f4ed6ed030a4410591715835890cb05caf8ddba98710c1d5fa</sum>
        </package>
        <package name="plexus-component-api-javadoc" version="1.0" release="0.24.alpha15.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-component-api-1.0-0.24.alpha15.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-component-api-javadoc-1.0-0.24.alpha15.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a6d3de90049746b5acb47431039909564fa91f17fabef5a054b54f1c62806c05</sum>
        </package>
        <package name="atinject-javadoc" version="1" release="28.20100611svn86.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="atinject-1-28.20100611svn86.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/atinject-javadoc-1-28.20100611svn86.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a78640a891dd894599414d04f8b3bdacdeee86add44f0ee79e8596f9e55730d3</sum>
        </package>
        <package name="mockito" version="1.10.19" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="mockito-1.10.19-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/mockito-1.10.19-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a78a79add1f415ffc7f4c98e85ca660fa1433f9c95c99655274fbc993f8e4617</sum>
        </package>
        <package name="maven-test-tools" version="3.3.0" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-testing-3.3.0-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-test-tools-3.3.0-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a79d3a93ccae731fe02447c7bb5434c715ff33e4776956c6682e2e8a6a9c5a82</sum>
        </package>
        <package name="guice-testlib" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-testlib-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a91f9b3ce0e9c1a70893c1305e54f64cda9ab1776707920e820254a2f291b5bb</sum>
        </package>
        <package name="antlr-manual" version="2.7.7" release="56.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="antlr-2.7.7-56.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/antlr-manual-2.7.7-56.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a98cf84e93ae466f6c94fa2f80e177d6160f00d2c746d2ca070579cdfbe42ab4</sum>
        </package>
        <package name="plexus-classworlds-javadoc" version="2.5.2" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-classworlds-2.5.2-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-classworlds-javadoc-2.5.2-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">a99ae830ace3923825135bf6a905ef38414d4a83f99659e1eb1ceebc53e3cee2</sum>
        </package>
        <package name="jakarta-commons-httpclient-manual" version="3.1" release="28.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="jakarta-commons-httpclient-3.1-28.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jakarta-commons-httpclient-manual-3.1-28.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">aa11b966762c0dbabca1aa79b340f5b5e404d503dda3663cacf4e9145b9ffbfe</sum>
        </package>
        <package name="maven-plugin-tools-model" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-model-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">aa30a79039b291f12f696f8372033a64c7bec2aa7e6290735643e0085f81aef7</sum>
        </package>
        <package name="maven-wagon-http-lightweight" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-http-lightweight-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">aabc4ef98c153f08e6293a824a0d404cf92409af00ed08a41e8c7cf09d7765c4</sum>
        </package>
        <package name="fusesource-pom" version="1.11" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="fusesource-pom-1.11-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/fusesource-pom-1.11-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">aaca18b633c76dbee29b4d6c147baf37c5c3e729164039822a2eef8b5f46237a</sum>
        </package>
        <package name="hamcrest" version="1.3" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hamcrest-1.3-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hamcrest-1.3-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ab965d8d0a2ba43f8d1787f6d2ddddf26e5a1beaf5a779a5f2669bb3a69bc8a6</sum>
        </package>
        <package name="munge-maven-plugin" version="1.0" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="munge-maven-plugin-1.0-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/munge-maven-plugin-1.0-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">acb3f9adac3385059646d0741e3730271e130067469fe13a950fe46f56fbc167</sum>
        </package>
        <package name="maven-invoker-javadoc" version="2.2" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-invoker-2.2-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-invoker-javadoc-2.2-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">acfb527713780691aa9c115ee069f14ffc9c83856144968045595101948e3d55</sum>
        </package>
        <package name="bsh" version="2.0" release="13.b6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bsh-2.0-13.b6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bsh-2.0-13.b6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ad01e010b15c9998f450ee3b6d4ed67ed8136d8d2e74246a2095af43b6c3f4e2</sum>
        </package>
        <package name="ant-apache-bsf" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-bsf-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ad7952ff014d75ff49a248248d78b7aa558ef94d94cc451b4c5decbbc8b98098</sum>
        </package>
        <package name="sisu-javadoc" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-javadoc-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">adadcae9dfecba9544728fa1b3c74dac20f042ffc0ea4432bc2deac352162d25</sum>
        </package>
        <package name="plexus-pom" version="5.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-pom-5.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-pom-5.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">adeb37deae323cd3bf343fe11f6406b0a920cad86018b97db835e2f8babb110c</sum>
        </package>
        <package name="maven-invoker" version="2.2" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-invoker-2.2-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-invoker-2.2-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ae09a33e26794632ec3cb1816d0b52485ffd58d5986699c0df58fb68369fc7a5</sum>
        </package>
        <package name="maven-doxia-core" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-core-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">af3986a9a68653dbfd54991cf617046033d74274d7bb09ec66ed50b2e411e7aa</sum>
        </package>
        <package name="geronimo-jpa" version="1.1.1" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="geronimo-jpa-1.1.1-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/geronimo-jpa-1.1.1-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">afb33ab666e846b874ee98bd9a76d9c382b22e242837de0a0b79252df6907f32</sum>
        </package>
        <package name="xalan-j2" version="2.7.1" release="38.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xalan-j2-2.7.1-38.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xalan-j2-2.7.1-38.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b0142e3a0be1c992b1291d72dcbde402429fdcf2e31c6add4b530290a028d187</sum>
        </package>
        <package name="spec-version-maven-plugin-javadoc" version="1.2" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="spec-version-maven-plugin-1.2-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/spec-version-maven-plugin-javadoc-1.2-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b0881c0ab1ef4ac215217c3ba40d4327bda7507d51e7997ce6d69d3aa81cd373</sum>
        </package>
        <package name="maven-plugin-annotations" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-annotations-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b0a54219f2b08db3d6d7e50139e56516231d5c04470deea2a39900f2e0c03ddb</sum>
        </package>
        <package name="maven-doxia-module-xhtml" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-xhtml-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b13b511215191bc7f87c9b1a185a07f13e368d52ffcdb057b5f295d9e274d404</sum>
        </package>
        <package name="guice-jndi" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-jndi-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b1c3b59dcd8ca0624e1546101d634755f03858a30b54a010cf21fc1d2d020713</sum>
        </package>
        <package name="maven-archiver" version="3.2.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-archiver-3.2.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-archiver-3.2.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b23a97898e228d1597294d23f57e176fa91351ea87d10aef4ab00d28b6ac351b</sum>
        </package>
        <package name="xmvn-install" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-install-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b2815878b89074c7850785b3526bc6e474bc00dd39cdebddedfd1fdedf819658</sum>
        </package>
        <package name="maven-invoker-plugin" version="1.10" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-invoker-plugin-1.10-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-invoker-plugin-1.10-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b313cefddab1274067ee32847137d6f491f961bd346b27744c9f3ae0e36cbf9e</sum>
        </package>
        <package name="javamail" version="1.5.2" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javamail-1.5.2-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javamail-1.5.2-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b38d5c8b0958b783a7d316ad3bc09525b51917f59d3db8ad7b588b43e5e99ebd</sum>
        </package>
        <package name="jansi-native-javadoc" version="1.7" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jansi-native-1.7-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jansi-native-javadoc-1.7-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b3cfb06b91f4435f0f18079314d15246c58a70e37cd371f585e8a9e74b674d87</sum>
        </package>
        <package name="maven-script" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-script-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b3f0a9f7c8946e23991d5d78fec455471e60e65a82d2685892fcf046b97d71e6</sum>
        </package>
        <package name="maven-doxia-sitetools-javadoc" version="1.7.5" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-sitetools-1.7.5-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-sitetools-javadoc-1.7.5-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b3f24a3d4e0094881ad843f45aa1ca08e81b448e11e8b2de3d967bb093b5acc8</sum>
        </package>
        <package name="felix-osgi-core-javadoc" version="1.4.0" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-osgi-core-1.4.0-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-osgi-core-javadoc-1.4.0-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b503f87efeb078d765d70c95c05895426beba919b0e42090426fd3e832160bb7</sum>
        </package>
        <package name="maven-wagon-ftp" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-ftp-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b60be077b446ae47a1f2173eb09414195ab3e89671401f08c34b56e2b76da823</sum>
        </package>
        <package name="maven-plugin-bundle-javadoc" version="3.5.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-bundle-3.5.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-bundle-javadoc-3.5.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b63c37f8a1e6d606d7e835008507ffe552281bd7881197ed52266cdc73eeb8a6</sum>
        </package>
        <package name="slf4j-ext" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-ext-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b649bdf9a9fc3b5a720c879104354b47fe71851ae1a33d403f148c3d2de1f148</sum>
        </package>
        <package name="felix-osgi-foundation" version="1.2.0" release="23.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-osgi-foundation-1.2.0-23.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-osgi-foundation-1.2.0-23.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b8312191bcf17504e2ac1fb520dc33d607ddd66fcc65b1b19e199c64c20597aa</sum>
        </package>
        <package name="plexus-containers-component-javadoc" version="1.7.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-containers-component-javadoc-1.7.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b87dd614558932a30bb00cc49db01989f0e85de84293f260971c78fbb48774d4</sum>
        </package>
        <package name="jsch" version="0.1.54" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jsch-0.1.54-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jsch-0.1.54-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b891849b4ade13266849d698ddc1d5ba7a0712fdeeefdda61b27f6499a3c0d2e</sum>
        </package>
        <package name="maven-wagon-http-shared" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-wagon-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-wagon-http-shared-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">b984670af894c190f54f526b66ee4a35f9628846e579e5eefa69939c4305cf5d</sum>
        </package>
        <package name="maven-shared" version="22" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shared-22-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-22-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ba6cf367ff4e297b562ea751214ca4f56e85d73f56cd13e61870cf01f841d536</sum>
        </package>
        <package name="maven-shared-incremental-javadoc" version="1.1" release="14.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shared-incremental-1.1-14.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-incremental-javadoc-1.1-14.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ba88893b71cbe0315cdfb58a0af640e2291320ed586b8ab61122782c5ca986c5</sum>
        </package>
        <package name="apache-commons-net-javadoc" version="3.6" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-net-3.6-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-net-javadoc-3.6-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ba9e16f05fb4e8635f7e17c17899367661329bcd8262c4f266d0b1aa6f90ad5c</sum>
        </package>
        <package name="atinject-tck" version="1" release="28.20100611svn86.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="atinject-1-28.20100611svn86.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/atinject-tck-1-28.20100611svn86.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">baafb87229a8a6cf73fe3c7e8468f37dc6d78012fb13666f7a1ea7881e83a574</sum>
        </package>
        <package name="jvnet-parent" version="4" release="10.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jvnet-parent-4-10.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jvnet-parent-4-10.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">bc390011e84cac7825843da55b22852a90794b696acc9fd1e68bab77990106df</sum>
        </package>
        <package name="maven-plugin-descriptor" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-descriptor-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">bc5b86b1a7c45c1562d684767edb84af3d43259687759a9133e77a5bd71bf86b</sum>
        </package>
        <package name="ant-apache-bcel" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-bcel-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">bca3ba95b4928dce919ee27506ba909c5da310c7dba21a0e186ea6743eba84b1</sum>
        </package>
        <package name="jdependency-javadoc" version="1.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdependency-1.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdependency-javadoc-1.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">becaa94398e75c4ea3e903ff05d92344e06ebb68537e9fbed908f8d2bc2249c0</sum>
        </package>
        <package name="guice-parent" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-parent-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">bf04d9b247d9a07527124603e758278a0a73e9d6739c5d83e4864c279ac13ef5</sum>
        </package>
        <package name="cal10n" version="0.8.1" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cal10n-0.8.1-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/cal10n-0.8.1-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">bfc635512ba5ebc143e61872d32acac0d22e46cff54301e41fcbd6bf18013a88</sum>
        </package>
        <package name="jdom2" version="2.0.6" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdom2-2.0.6-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdom2-2.0.6-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">bfd96f60c4721498785e33d2f8aa3ec2a8cdad097eecb472cd2631ed3a4b7643</sum>
        </package>
        <package name="maven-common-artifact-filters-javadoc" version="3.0.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-common-artifact-filters-3.0.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-common-artifact-filters-javadoc-3.0.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c09dd159a2ba312c033b1a3315d684f39ef59295fa54bc662666b240fa34c4f2</sum>
        </package>
        <package name="httpcomponents-client-cache" version="4.5.5" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="httpcomponents-client-4.5.5-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/httpcomponents-client-cache-4.5.5-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c0da4cd9f337bd103d51019a5027f16f16f4a12fdd871d8defe747bb14c84ff6</sum>
        </package>
        <package name="maven-shared-io-javadoc" version="3.0.0" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-shared-io-3.0.0-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-io-javadoc-3.0.0-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c14475ff2fc6de09f35d93dda5eaa5bc9c7b75991839a1abe4ffcb4dd0ab7598</sum>
        </package>
        <package name="guava20" version="20.0" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="guava20-20.0-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guava20-20.0-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c184a783c69b0dd7c92bf874ea299d85080a0b615876d70019a8df9f6e0ad408</sum>
        </package>
        <package name="jdom-demo" version="1.1.3" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdom-1.1.3-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdom-demo-1.1.3-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c1b26166428181494e780cc3786712b418d94aaec4e3275d1fde0a61bac1ce20</sum>
        </package>
        <package name="maven-artifact-transfer" version="0.9.0" release="4.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-artifact-transfer-0.9.0-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-artifact-transfer-0.9.0-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c2583f6cd0c8fcd1ab5931945af6ba53f6e77ce669b361f3b5d0a6988856b62b</sum>
        </package>
        <package name="jsr-305-javadoc" version="0" release="0.22.20130910svn.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jsr-305-0-0.22.20130910svn.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jsr-305-javadoc-0-0.22.20130910svn.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c2727421df8fd19faa12abbb5544ee8681c45d13e773e48d4cf85d367c892e25</sum>
        </package>
        <package name="jdom" version="1.1.3" release="17.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdom-1.1.3-17.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdom-1.1.3-17.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c2a359383783d545034f185f7bf8a56120024b7e806d61b67016ff49111d16cb</sum>
        </package>
        <package name="powermock-api-support" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-api-support-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c3407db281752cfd78914e7e84de462bf08c11b071072c66ddb46190ccc6da13</sum>
        </package>
        <package name="maven-resolver-transport-wagon" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-transport-wagon-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c3872f94512b6aee9e0ee7db14a0a61c428e5d79e0737252fafedd31679db94f</sum>
        </package>
        <package name="maven-resolver-transport-file" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-transport-file-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c403d50bd23228fae36c6d2bf430e9c40a46c6e86a1de713dabb9b6262647864</sum>
        </package>
        <package name="beust-jcommander-javadoc" version="1.71" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="beust-jcommander-1.71-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/beust-jcommander-javadoc-1.71-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c475f8dda82cd51995b361e7bf3c9964da6d7242cf912b2a17644649daecdd1d</sum>
        </package>
        <package name="jdom2-javadoc" version="2.0.6" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdom2-2.0.6-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdom2-javadoc-2.0.6-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c47fc3d95d07d61a8dd3e30068d90d11c48659274fcff103bd1d25db380200c2</sum>
        </package>
        <package name="maven-artifact-resolver" version="1.0" release="18.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-artifact-resolver-1.0-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-artifact-resolver-1.0-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c650a2157c75d18c74fbbdfd9ad81159e73c638ec185953e9fd6d9ade71305d1</sum>
        </package>
        <package name="maven-model" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-model-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c677ebe5583a02cdaa54b2999b7e2bb4705dad3265c7ac6752220f88c1222986</sum>
        </package>
        <package name="felix-utils" version="1.10.4" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-utils-1.10.4-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-utils-1.10.4-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c6a0309e453851598a247cf4103c93570def221f9a29a0f9b7f73e8df92d44ce</sum>
        </package>
        <package name="httpcomponents-client-javadoc" version="4.5.5" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="httpcomponents-client-4.5.5-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/httpcomponents-client-javadoc-4.5.5-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c6e90b55f784c19bcb45ace7c4c8ef91c4bed3407f484c86f2e2261157e54b2d</sum>
        </package>
        <package name="antlr-javadoc" version="2.7.7" release="56.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="antlr-2.7.7-56.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/antlr-javadoc-2.7.7-56.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c7d461687f4dc3dbcf155e78202368e8e38e40300cf30432f666c20f44eb3fe8</sum>
        </package>
        <package name="ant-apache-xalan2" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-xalan2-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c82ca722181d3727a073c82c2c9e7254087c0bee9fc1908a75cd2a99a1e1110a</sum>
        </package>
        <package name="modello-javadoc" version="1.9.1" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="modello-1.9.1-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/modello-javadoc-1.9.1-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c94d52744e4e90c096e5f309f70e5ef1fc50c56bb8a85358a98f6333c85fb1ec</sum>
        </package>
        <package name="plexus-languages-javadoc" version="0.9.10" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-languages-0.9.10-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-languages-javadoc-0.9.10-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c95191c215c9aab032b719701b91dffbaa2ead1b1ab6a1a8ad81a1b77a3d102b</sum>
        </package>
        <package name="maven-plugin-bundle" version="3.5.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-bundle-3.5.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-bundle-3.5.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c9dd342c6e4244d0bbb2d1d2a7a6560d85690e911677959525104c7d8b2666bc</sum>
        </package>
        <package name="ant-jsch" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-jsch-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">c9e61bca79c4ac40e610b186ae6c8bf6990e0ea5f67902cedc5bc46a8338655c</sum>
        </package>
        <package name="plexus-interactivity-jline" version="1.0" release="0.27.alpha6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-interactivity-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-interactivity-jline-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">caa77584df6fa1ee01dc491c8cbdff8b1e71816c80acfb5c9c19f894fe4c8231</sum>
        </package>
        <package name="modello" version="1.9.1" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="modello-1.9.1-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/modello-1.9.1-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cab9931aa0cb48a33b11f074f8ee2614155ce538b41ba1634e247e31420c7051</sum>
        </package>
        <package name="javacc-maven-plugin" version="2.6" release="25.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javacc-maven-plugin-2.6-25.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javacc-maven-plugin-2.6-25.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cabe6cefae38c55d65466e93b22a180772e14716ee9ab4f48662f691878dbc42</sum>
        </package>
        <package name="spec-version-maven-plugin" version="1.2" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="spec-version-maven-plugin-1.2-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/spec-version-maven-plugin-1.2-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cac4cec9b7e0aaf9a5dff6c322a240bac227f0851e6f3faa172ffcec3c391779</sum>
        </package>
        <package name="javassist" version="3.18.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javassist-3.18.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javassist-3.18.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cb248df4c32958f6d46c5c4f0d69ed54d3c1c349708639e19ca296fb9618b04c</sum>
        </package>
        <package name="ant-contrib-javadoc" version="1.0" release="0.32.b3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-contrib-1.0-0.32.b3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-contrib-javadoc-1.0-0.32.b3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cbcd30fa853aee217032497ae10f613e2172f9c1a58fc2f6a4c14f8b9790fbd5</sum>
        </package>
        <package name="jdepend-javadoc" version="2.9.1" release="18.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdepend-2.9.1-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdepend-javadoc-2.9.1-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cc761964a4939528f9b7a08fc917a663fa21f6f1f0ffe11c33ae0a923348e553</sum>
        </package>
        <package name="maven-settings" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-settings-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cc8c42db6ffcafdd5edbb84fd2af0f423e65a3e8e35bb2e0fcaa967ae08d9749</sum>
        </package>
        <package name="maven-archiver-javadoc" version="3.2.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-archiver-3.2.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-archiver-javadoc-3.2.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ccca0db6422407c47456046e1bc8977e77e9042f4e077d4eb7ccb7d8581812b7</sum>
        </package>
        <package name="maven-dependency-plugin-javadoc" version="3.0.2" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-dependency-plugin-3.0.2-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-dependency-plugin-javadoc-3.0.2-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cd7595c7b94f3d5b7604043c7a9e37ae3db14cfed4a7121bb6a50f7fe01e4999</sum>
        </package>
        <package name="maven2-javadoc" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven2-javadoc-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">cfc5cdf14130ac1aeb0d506af001775f470c1b9d5ef8737fc13fed3ef32e3bcb</sum>
        </package>
        <package name="maven-artifact-resolver-javadoc" version="1.0" release="18.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-artifact-resolver-1.0-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-artifact-resolver-javadoc-1.0-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d02ed69352164d94d155790c50f87f50fd7ef8a00f207c835adc36fa2401b2be</sum>
        </package>
        <package name="maven-plugin-tools-generators" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-generators-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d085d516dce9dfaa09b5b38ec422fa63056395494f650a39e6abaed6d5322658</sum>
        </package>
        <package name="java_cup-manual" version="0.11b" release="8.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="java_cup-0.11b-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/java_cup-manual-0.11b-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d0f131780dde78a96d0999af75fb82d5ce45cb6d0d08cbfcf0db7d889a540994</sum>
        </package>
        <package name="guice-servlet" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-servlet-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d167fc599172bc3b102891adc9f9bda8ad39babd3432e085278405a73ec45226</sum>
        </package>
        <package name="hawtjni-runtime" version="1.16" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="hawtjni-1.16-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/hawtjni-runtime-1.16-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d20aac5e39cab27c1c18e9576ef9f516260500120ff2c2ede47009afb3099180</sum>
        </package>
        <package name="maven-plugin-tools-javadoc" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-javadoc-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d28fe69b463bc29fa19d9f50c92e7f1f3848e0c447587f5e4018a67683ca95df</sum>
        </package>
        <package name="ant-apache-oro" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-oro-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d325156449f9793a2e31df5ea3eff896c45022d0bf8ea564e1d543446281ce05</sum>
        </package>
        <package name="maven-surefire-plugin" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-plugin-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d343ae1d97a6d4b037f2421791870d6e3323d171f5f010172fde4441ff675393</sum>
        </package>
        <package name="apache-commons-collections-testframework" version="3.2.2" release="10.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-collections-3.2.2-10.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-collections-testframework-3.2.2-10.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d360e488cd80a55eb7f0edbad4ba0b16ebaa2106176994e5c19f27a20605766f</sum>
        </package>
        <package name="maven-resolver-impl" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-impl-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d5233bde2933e4e8225c28351af2a5485dab1ccb6d539077256226aaae9c8f64</sum>
        </package>
        <package name="junit-javadoc" version="4.12" release="9.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="junit-4.12-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/junit-javadoc-4.12-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d55d229cdf055599c3d5b11a9ff7d00cc4ef21dce6b0cadf9f63ab0ed5c8adfc</sum>
        </package>
        <package name="maven-resolver" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d55e4968a9101f63053f7dd2a74108408fc99adcc143c4299663bf0f87a53e50</sum>
        </package>
        <package name="maven-local" version="5.3.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javapackages-tools-5.3.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-local-5.3.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d576b347139fe9e959cb9f59dfdd1ec2e9ad970adab01324e28feff88e8c1822</sum>
        </package>
        <package name="spice-parent" version="26" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="spice-parent-26-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/spice-parent-26-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d5a8e54f77fbd74e56fc5fb1385dcba199db3a18b4a89a1328b2201094a41520</sum>
        </package>
        <package name="plexus-build-api" version="0.0.7" release="20.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-build-api-0.0.7-20.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-build-api-0.0.7-20.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d5d121986423c3d23f829c3c626058a36c75c9dddeb44ea94789036ace2fe941</sum>
        </package>
        <package name="ant" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d7693b2779267693ecfbb2fdc35f4a92b3db53bb12ffe0749e33e6d2d44d148b</sum>
        </package>
        <package name="maven-compiler-plugin-javadoc" version="3.7.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-compiler-plugin-3.7.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-compiler-plugin-javadoc-3.7.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d7b72c748a705e0dabf08873300ddb21167fc13e988666464e374135aeb9a718</sum>
        </package>
        <package name="httpcomponents-core" version="4.4.10" release="4.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="httpcomponents-core-4.4.10-4.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>httpcomponents-core-4.4.10-4.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">d874705b5583a67058cf549b260835c9430789a592acffbacc533c6399182d1b</sum>
        </package>
        <package name="felix-utils-javadoc" version="1.10.4" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="felix-utils-1.10.4-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/felix-utils-javadoc-1.10.4-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d8896f13d06ee2bdeb8a4bd7e80c7b01929082f6e4dde2fc1df1264bb9ab8fc9</sum>
        </package>
        <package name="ant-javamail" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-javamail-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">d91c8fd36202de856870ab8696a8b6d77790a7ccc0e9905f3137e70037056ada</sum>
        </package>
        <package name="log4j12" version="1.2.17" release="22.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="log4j12-1.2.17-22.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/log4j12-1.2.17-22.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">da3ecce8f04d1a586d393ab9f9194b595d67b66592e1164500bbfd077e2bbdb3</sum>
        </package>
        <package name="maven-cal10n-plugin" version="0.8.1" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cal10n-0.8.1-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-cal10n-plugin-0.8.1-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">da40631047d829404c07925f2a5f905b070a62d6bbb4d9a88ff8abe41ac797e6</sum>
        </package>
        <package name="objectweb-asm" version="6.2" release="5.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="objectweb-asm-6.2-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/objectweb-asm-6.2-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">da5ee0579c338d53dfe6534b78f5f1f1a0d6abc1c847a0900c6b4a0825c8475b</sum>
        </package>
        <package name="maven-assembly-plugin-javadoc" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-assembly-plugin-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-assembly-plugin-javadoc-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">dae547ef9326f646b2303c949b2a10fb6bc8168f3eb3b6e5e363713f1b91ec31</sum>
        </package>
        <package name="maven-source-plugin-javadoc" version="3.0.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-source-plugin-3.0.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-source-plugin-javadoc-3.0.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">db89e282227f8f15ffda48f77934ecfa9e597e6757171a3619521f03e4e4e038</sum>
        </package>
        <package name="maven-plugin-testing-javadoc" version="3.3.0" release="12.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-testing-3.3.0-12.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-testing-javadoc-3.3.0-12.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">dbede1f035131266c4660f678a62b89dda5894174a2d75879c5116a8998824ea</sum>
        </package>
        <package name="maven-shared-utils" version="3.2.1" release="0.1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shared-utils-3.2.1-0.1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-utils-3.2.1-0.1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">dcae4dd260f60276a0d6e8a5323b694425d8a14defb83f8cbe3d9951cddcef70</sum>
        </package>
        <package name="maven-common-artifact-filters" version="3.0.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-common-artifact-filters-3.0.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-common-artifact-filters-3.0.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">dcf8cfb9ea872049af55db2e71dfd10a0e88e5767ddcdaf19dc9365f57c5cb1f</sum>
        </package>
        <package name="java_cup" version="0.11b" release="8.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="java_cup-0.11b-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/java_cup-0.11b-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">de40311ce3763bf202c0c34eb00a7ffa3685fff44c9e8c80e9e1fdcaa8097d8f</sum>
        </package>
        <package name="plexus-utils" version="3.1.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-utils-3.1.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-utils-3.1.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">de92a467d0ddebcefed92e60c91d5984e90db6bd2204f9b3ad0a383aafbf098a</sum>
        </package>
        <package name="maven" version="3.5.4" release="5.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-3.5.4-5.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-3.5.4-5.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">df177761ea235e7656c19ff6b0165e7a80e5fa93f5526a816c9974a51adb1cd8</sum>
        </package>
        <package name="glassfish-legal" version="1.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-legal-1.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-legal-1.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">df45bf6a6d3e7c127a458147d19b6ee449ec3bb5e2c7186b9568d048e1fd8e2b</sum>
        </package>
        <package name="plexus-sec-dispatcher" version="1.4" release="26.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-sec-dispatcher-1.4-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-sec-dispatcher-1.4-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">df873fdd208c610d09c972a84330a89c8a5ecca3f8541ca900a3a936405c9e9c</sum>
        </package>
        <package name="plexus-interpolation-javadoc" version="1.22" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-interpolation-1.22-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-interpolation-javadoc-1.22-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">dff2abcc2a57667f89dc9fa60d67ab4fb7029a6c9ae5267b832d0d2389dcfc69</sum>
        </package>
        <package name="maven-doxia-module-xdoc" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-module-xdoc-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e20a5d1689b1fd331e9a3e745c110c25846fcd04496890f22ba98c269b7fc241</sum>
        </package>
        <package name="slf4j-log4j12" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-log4j12-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e23bf952023a11a5aa66c05b56d24cc743299c66583e186e6576b262a2bdba6d</sum>
        </package>
        <package name="easymock" version="3.5" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="easymock-3.5-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/easymock-3.5-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e28023a75d2c1f683eba1c4a7321b98a3d195161b03daa9f83e5a395fa487f18</sum>
        </package>
        <package name="maven-doxia-logging-api" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-logging-api-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e3443ddde62897917487b76097caa5f0a1fa52bea030d511e405b2c26f910cdc</sum>
        </package>
        <package name="velocity-demo" version="1.7" release="24.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="velocity-1.7-24.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/velocity-demo-1.7-24.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e427a1297ce63189ea80e1fcabca8fdc3f0f37da8649a415399dbdedf92d7ba0</sum>
        </package>
        <package name="plexus-velocity" version="1.2" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-velocity-1.2-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-velocity-1.2-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e438becf6160d91fdf4f7c833b3d61406edb85ca722ff9aa730113c4319f62b9</sum>
        </package>
        <package name="glassfish-el" version="3.0.1" release="0.7.b08.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="glassfish-el-3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/glassfish-el-3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e4571d7a8359fbb25e9aee8356438c7d32c883b51460eff5f14dabcab2086efa</sum>
        </package>
        <package name="maven-doxia-javadoc" version="1.7" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-doxia-1.7-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-doxia-javadoc-1.7-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e4d1674caa44b841ef1830df4d82c4fb51a59eb657d20d3443709f3f3fcf2fc1</sum>
        </package>
        <package name="maven-plugin-build-helper-javadoc" version="1.9.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-build-helper-1.9.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-build-helper-javadoc-1.9.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e585f77679e39bd48c6aadf436ce363ae5e88a528fa3f52f6275a4da21f98898</sum>
        </package>
        <package name="ant-javadoc" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-javadoc-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e5bd57b82c5cc5223ff9d5ce490176db1338829b8a5b7cc50d0ffc782d54b873</sum>
        </package>
        <package name="plexus-io" version="3.0.0" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-io-3.0.0-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-io-3.0.0-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e62e6cc222c53f0c33534c995edfbb2f45095bd8f06e57dc49c0eb7176af701f</sum>
        </package>
        <package name="apache-commons-lang-javadoc" version="2.6" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-lang-2.6-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-lang-javadoc-2.6-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e737b211615aa724912beaac39e43a247c99bf2a843472c201a9f83650378760</sum>
        </package>
        <package name="maven-remote-resources-plugin-javadoc" version="1.5" release="2.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-remote-resources-plugin-1.5-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-remote-resources-plugin-javadoc-1.5-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e81cb7d89ba947d8d79de2ec82eac7119100de3cc06c5039041108c697ac4b4a</sum>
        </package>
        <package name="xmvn-connector-ivy" version="3.0.0" release="21.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmvn-3.0.0-21.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmvn-connector-ivy-3.0.0-21.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e844a4f5636f0c9162c1b79b5462b7207dd70bbfd1b71e21e29475f9ee766e69</sum>
        </package>
        <package name="plexus-velocity-javadoc" version="1.2" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-velocity-1.2-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-velocity-javadoc-1.2-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e88bc434fc8e4576a5c6f71183516416ebf1baffa26f2cbb193aad9388fae1fc</sum>
        </package>
        <package name="plexus-containers-container-default" version="1.7.1" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-containers-1.7.1-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-containers-container-default-1.7.1-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">e96a27a5ba9c1ba2f00f22dc3662412a43fbebd8a15bac497cf25fa981323787</sum>
        </package>
        <package name="google-guice" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/google-guice-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ea4884ab4c522b48cb238ab7b020a81d8612a193900fbc3a7464281d56ba1369</sum>
        </package>
        <package name="antlr-C++" version="2.7.7" release="56.module_el8.0.0+6004+2fc32706" epoch="0" arch="aarch64" src="antlr-2.7.7-56.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/antlr-C++-2.7.7-56.module_el8.0.0+6004+2fc32706.aarch64.rpm</filename>
          <sum type="sha256">ea767a212c4d079c81ed6c604a769d639d013ac98c0604db8727d4ef81b88b84</sum>
        </package>
        <package name="xmlunit-javadoc" version="1.6" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xmlunit-1.6-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xmlunit-javadoc-1.6-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">eadc5adeb2c5eed298566341b99ca2ae8cbc5928149d0fc6e06a289eb6845940</sum>
        </package>
        <package name="maven-surefire-provider-junit" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-provider-junit-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">eae2f381a30989f497a25c15ecd7939e3456ecf3890fc1abfd6b313198b7ac5a</sum>
        </package>
        <package name="maven-resolver-javadoc" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-javadoc-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">eb56aff14e1ff2fdd9cea3d668b5770cacf9ad31aee927665fbda87cc439ecda</sum>
        </package>
        <package name="apache-commons-codec" version="1.11" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-codec-1.11-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-codec-1.11-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ec918fac7f087c4b7a1e9749fea76c7cba79601b7b9a46a7a5b6c79b437e0205</sum>
        </package>
        <package name="powermock-testng" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-testng-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ed40eaa8180b00a3b651f569b7a3cd19abb955fe8f9a1652da95538e168291a7</sum>
        </package>
        <package name="maven-resolver-spi" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-spi-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ed9fe0a986cf7008d4ec7d1c79264da61534d9d421918d9578223fec84350f3d</sum>
        </package>
        <package name="guice-grapher" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-grapher-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">edad08778b76fc0d7f4758ea61638f517261ccff39bd1b7fcf9fc18503f4f321</sum>
        </package>
        <package name="guice-bom" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-bom-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ee0a2ea9a9d8b071e5dbcc3c05d33058c1dcee00ca401b228122b189e1ffc442</sum>
        </package>
        <package name="ant-contrib" version="1.0" release="0.32.b3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-contrib-1.0-0.32.b3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-contrib-1.0-0.32.b3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ee63c6f0e01c36a8e899fcff950775559ad4b721f926f64fca4153446d0acb25</sum>
        </package>
        <package name="maven-profile" version="2.2.1" release="59.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven2-2.2.1-59.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-profile-2.2.1-59.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">eed2cf43b03e2d4e7e3685f9590045deaecdf2de897c84ce7197297b1fa5d1b1</sum>
        </package>
        <package name="qdox" version="2.0" release="3.M9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="qdox-2.0-3.M9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/qdox-2.0-3.M9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ef0bb35fb34e73d962e54f6e38bc136bd08985b7708a7bda148815556b7a072f</sum>
        </package>
        <package name="sisu-inject" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-inject-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">ef29ebced6604b95ad3dbf8fd5b64bbd5e0320ac9aa9e7dfcef02756c7c331d1</sum>
        </package>
        <package name="cal10n-javadoc" version="0.8.1" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cal10n-0.8.1-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/cal10n-javadoc-0.8.1-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f036477996a4cd57f715e1212e6c39f3cee59702627df350ad40c00618f20819</sum>
        </package>
        <package name="javacc-demo" version="7.0.2" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="javacc-7.0.2-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/javacc-demo-7.0.2-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f05142f1c934086d27bce3127dd41077af6447aa2db8e1a52e1ede4c4dafca45</sum>
        </package>
        <package name="ant-apache-resolver" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-resolver-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f1eeb72dee7404493aa73ac05df15e91787bde0ffa503f7e7921db0448fb318f</sum>
        </package>
        <package name="isorelax-javadoc" version="0" release="0.23.release20050331.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="isorelax-0-0.23.release20050331.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/isorelax-javadoc-0-0.23.release20050331.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f289b5414880f04d52369342453503401ac273e95c6bc20264e1e26316c186cf</sum>
        </package>
        <package name="apache-commons-collections" version="3.2.2" release="10.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-collections-3.2.2-10.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-collections-3.2.2-10.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f38df33cd1b2f0c69e92bf0c6542cc549b0ba2f9a369c3fc0ce3f33e9bfa513e</sum>
        </package>
        <package name="maven-resolver-api" version="1.1.1" release="2.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="maven-resolver-1.1.1-2.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-resolver-api-1.1.1-2.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f3c083d5b049b35bd58bb11785fffd63a76f4de87c330c47299b534459839022</sum>
        </package>
        <package name="jdepend" version="2.9.1" release="18.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jdepend-2.9.1-18.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jdepend-2.9.1-18.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f4b85e4ab7ddaa6ddc2796225c483076cea057be90b6e84fc4d8f56db340115b</sum>
        </package>
        <package name="objectweb-pom" version="1.5" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="objectweb-pom-1.5-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/objectweb-pom-1.5-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f5d8fb69eccf8ccb5373e53d8fcd353e77ee5501b9c9d4b0e2482e7780fb3810</sum>
        </package>
        <package name="powermock-reflect" version="1.6.5" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="powermock-1.6.5-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/powermock-reflect-1.6.5-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f6a146ddd2b800790b17c9859acac0a61519d75c3bfb8b21341ee18c09e50dcb</sum>
        </package>
        <package name="guice-jmx" version="4.1" release="11.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="google-guice-4.1-11.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/guice-jmx-4.1-11.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f6faa220a2c4ed482ff728873e1216ed38efe069df92132bfa8babb3614f5e19</sum>
        </package>
        <package name="ant-apache-log4j" version="1.10.5" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="ant-1.10.5-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/ant-apache-log4j-1.10.5-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f7e49f6abc12d767744f9cc1dd5d1eae2a295868601ab9174f156244ba221b18</sum>
        </package>
        <package name="maven-surefire-report-parser" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-report-parser-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f8636bee657cebd8532abe14258f5526506c67a6a8ba2bc34109a25b6587e382</sum>
        </package>
        <package name="plexus-build-api-javadoc" version="0.0.7" release="20.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-build-api-0.0.7-20.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-build-api-javadoc-0.0.7-20.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f8d1ac14f2020e10c273863cb8b064f34bcf74d6b785fe71a7552ff757f85716</sum>
        </package>
        <package name="easymock-javadoc" version="3.5" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="easymock-3.5-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/easymock-javadoc-3.5-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f9339a93e9503322cf0e1c00f722d5230860539648049d4e1a3c20620dcf2230</sum>
        </package>
        <package name="jtidy" version="1.0" release="0.28.20100930svn1125.module_el8.0.0+6004+2fc32706" epoch="2" arch="noarch" src="jtidy-1.0-0.28.20100930svn1125.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jtidy-1.0-0.28.20100930svn1125.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f93a91e911853a6de6703cc575c5f1bea126ce151c5441770b1bd9f6cede2bb4</sum>
        </package>
        <package name="slf4j" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f959eedfd305bfc480e534a5b66de79a9f8e7c7eb8cca3723add0dc2906b244d</sum>
        </package>
        <package name="maven-shared-utils-javadoc" version="3.2.1" release="0.1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-shared-utils-3.2.1-0.1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-shared-utils-javadoc-3.2.1-0.1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f98ba81e3c36591d00d11055e3e19c2dfbb1534bc2bddcc21f54bec3265f701e</sum>
        </package>
        <package name="cglib-javadoc" version="3.2.4" release="7.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="cglib-3.2.4-7.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/cglib-javadoc-3.2.4-7.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f9b1648f3864bff26f48d486ad1b4b3c7161fb31f3ef9067f11b340213c36dcc</sum>
        </package>
        <package name="plexus-interactivity-api" version="1.0" release="0.27.alpha6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-interactivity-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-interactivity-api-1.0-0.27.alpha6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">f9c6197c9cf4e1afa04f32e35ddea3168646a0279a301c5f32d692d09d5df80e</sum>
        </package>
        <package name="jsch-javadoc" version="0.1.54" release="6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jsch-0.1.54-6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jsch-javadoc-0.1.54-6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">facddabd7176261614d77ec2d3bb5c9689d0f49e6736873da8f3a1d8a3f2ccd3</sum>
        </package>
        <package name="regexp-javadoc" version="1.5" release="26.module_el8.0.0+6004+2fc32706" epoch="1" arch="noarch" src="regexp-1.5-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/regexp-javadoc-1.5-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">faf2e434ab9e0084fbbd51183919bb37ad0f8ff8bad062ed818d30ea9cef3ab4</sum>
        </package>
        <package name="apache-commons-jxpath-javadoc" version="1.3" release="29.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-jxpath-1.3-29.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-jxpath-javadoc-1.3-29.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fb29fe651de23389fa2d1dc53ad04d63ad53bba742c2a0407368e96fbe0c684d</sum>
        </package>
        <package name="apache-commons-exec-javadoc" version="1.3" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-exec-1.3-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-exec-javadoc-1.3-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fb6b6f8b1e51a93e8186248c51078d7996296b68a87bd57ed64883ae33c3e870</sum>
        </package>
        <package name="bsh-manual" version="2.0" release="13.b6.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="bsh-2.0-13.b6.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/bsh-manual-2.0-13.b6.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fb7864764c21c18877b27abb515cb5d0973ba07834ef3b66a7a669db118a88ba</sum>
        </package>
        <package name="maven-plugin-tools-ant" version="3.5.1" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-plugin-tools-3.5.1-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-plugin-tools-ant-3.5.1-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fc2a925617d0b0e04bea83605b92a9bd269859db3f494a752a7b19cb6b8cbe2d</sum>
        </package>
        <package name="maven-surefire-report-plugin" version="2.22.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-surefire-2.22.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-surefire-report-plugin-2.22.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fc4bf0e540198971bbc539abd2f8488e9e5673fab643a3a317f3c2aa77ca1fc3</sum>
        </package>
        <package name="exec-maven-plugin-javadoc" version="1.6.0" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="exec-maven-plugin-1.6.0-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/exec-maven-plugin-javadoc-1.6.0-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fcb4a07fad3a6c4ad92d19cf4cf261a26e3896e295ed5ae20ec32de70bf8a335</sum>
        </package>
        <package name="slf4j-jcl" version="1.7.25" release="4.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="slf4j-1.7.25-4.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/slf4j-jcl-1.7.25-4.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fd12df34b87ee1901512e398dd0e9d683fcb85812f379d00139e0fd485ee4063</sum>
        </package>
        <package name="apache-commons-exec" version="1.3" release="8.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="apache-commons-exec-1.3-8.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/apache-commons-exec-1.3-8.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fd6505389a6e5c0ca58d4a0c67f4748bfe40947d8a4cef99b7dcc4a8a9dab3d5</sum>
        </package>
        <package name="jsoup-javadoc" version="1.11.3" release="3.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="jsoup-1.11.3-3.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/jsoup-javadoc-1.11.3-3.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fd939b27badea0e4ef1041caf978c88fef75d70b8934c710921fa723a4a60be7</sum>
        </package>
        <package name="plexus-interpolation" version="1.22" release="9.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="plexus-interpolation-1.22-9.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/plexus-interpolation-1.22-9.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fea6954d135e5972ae8bfe31482f101912e4dbeeeaaf6938c36dc5eb6316c255</sum>
        </package>
        <package name="xml-commons-resolver-javadoc" version="1.2" release="26.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xml-commons-resolver-1.2-26.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xml-commons-resolver-javadoc-1.2-26.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">feefd0f03b6aa8991087b12500b37523a0647cf0062263cc6ea6096dd06a9a0b</sum>
        </package>
        <package name="maven-jar-plugin-javadoc" version="3.1.0" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="maven-jar-plugin-3.1.0-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/maven-jar-plugin-javadoc-3.1.0-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">fefb2f492c04f2f66133579173da0d1ccc24856e13152f8a56f24ca135aa59b0</sum>
        </package>
        <package name="xbean-javadoc" version="4.8" release="1.module_el8.0.0+6004+2fc32706" epoch="0" arch="noarch" src="xbean-4.8-1.module_el8.0.0+6004+2fc32706.src.rpm">
          <filename>Packages/xbean-javadoc-4.8-1.module_el8.0.0+6004+2fc32706.noarch.rpm</filename>
          <sum type="sha256">ff31144dbb8ecca0d9b67cb30a74967b29336d084d263f6b430998c0bc877f74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9329</id>
    <title>Important: perl-YAML-LibYAML security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:18:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-YAML-LibYAML security update</summary>
    <description>Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby.  

Security Fix(es):  

  * yaml-libyaml: LibYAML Perl File Modification Vulnerability (CVE-2025-40908)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9329" id="RHSA-2025:9329" type="rhsa" title="RHSA-2025:9329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40908" id="CVE-2025-40908" type="cve" title="CVE-2025-40908"/>
      <reference href="https://bugzilla.redhat.com/2369630" id="2369630" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9329.html" id="ALSA-2025:9329" type="self" title="ALSA-2025:9329"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="perl-YAML-LibYAML" version="0.70" release="2.el8_10" epoch="1" arch="aarch64" src="perl-YAML-LibYAML-0.70-2.el8_10.src.rpm">
          <filename>perl-YAML-LibYAML-0.70-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">38244d8d40f4adb75e44e808d9673adbb818e5e65482112f9b90120c8c4925a7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9580</id>
    <title>Moderate: kernel security update</title>
    <issued date="2025-06-25 00:00:00"/>
    <updated date="2025-06-26 18:38:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: cifs: fix double free race when mount fails in cifs_get_root() (CVE-2022-48919)
  * kernel: security/keys: fix slab-out-of-bounds in key_task_permission (CVE-2024-50301)
  * kernel: idpf: fix idpf_vc_core_init error path (CVE-2024-53064)
  * kernel: ndisc: use RCU protection in ndisc_alloc_skb() (CVE-2025-21764)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9580" id="RHSA-2025:9580" type="rhsa" title="RHSA-2025:9580"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48919" id="CVE-2022-48919" type="cve" title="CVE-2022-48919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50301" id="CVE-2024-50301" type="cve" title="CVE-2024-50301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-53064" id="CVE-2024-53064" type="cve" title="CVE-2024-53064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21764" id="CVE-2025-21764" type="cve" title="CVE-2025-21764"/>
      <reference href="https://bugzilla.redhat.com/2327188" id="2327188" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2327347" id="2327347" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2348575" id="2348575" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9580.html" id="ALSA-2025:9580" type="self" title="ALSA-2025:9580"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.58.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.58.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.58.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">9c61b5fa39c8211921ecd8c5a81d557ab415ed43f9b45e1e05d6c134c45c66f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9605</id>
    <title>Important: perl-File-Find-Rule security update</title>
    <issued date="2025-06-25 00:00:00"/>
    <updated date="2025-06-26 18:41:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-File-Find-Rule security update</summary>
    <description>File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.  

Security Fix(es):  

  * perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9605" id="RHSA-2025:9605" type="rhsa" title="RHSA-2025:9605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2011-10007" id="CVE-2011-10007" type="cve" title="CVE-2011-10007"/>
      <reference href="https://bugzilla.redhat.com/2370424" id="2370424" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9605.html" id="ALSA-2025:9605" type="self" title="ALSA-2025:9605"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="perl-File-Find-Rule" version="0.34" release="9.el8_10" epoch="0" arch="noarch" src="perl-File-Find-Rule-0.34-9.el8_10.src.rpm">
          <filename>perl-File-Find-Rule-0.34-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">9817797881652586f30a8462920e76a183db2131c3ff88756c2fa7142535864e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9878</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-01 22:08:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID.  

Security Fix(es):  

  * libblockdev: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9878" id="RHSA-2025:9878" type="rhsa" title="RHSA-2025:9878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9878.html" id="ALSA-2025:9878" type="self" title="ALSA-2025:9878"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libblockdev-lvm-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-lvm-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">140f4ac59a052e5bc1e06b206c44eea028028523c83bc4e232e50ca0f9656728</sum>
        </package>
        <package name="libblockdev-utils-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-utils-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">45ec2b0c9f713d99824510f8085fb56adeb26602335cbccf376ff2cffe679dda</sum>
        </package>
        <package name="libblockdev-crypto-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-crypto-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4eb833c8645a1d65d9654ef276eb04970a21ba9544dbd5e0580ccfd885fa455e</sum>
        </package>
        <package name="libblockdev-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">a809c7f35a78a14390131c3a9c9b7444abe7ad3a7ed400c8af72a6f51f4a2324</sum>
        </package>
        <package name="libblockdev-mdraid-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-mdraid-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b985de2e1e8f36eb3ad358abfa59399351e947e6ca0cc320d365b408c14a817d</sum>
        </package>
        <package name="libblockdev-fs-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-fs-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c32054e60473551959aee89b006822cf9c06f1a98d0069f55232d298fd53992c</sum>
        </package>
        <package name="libblockdev-loop-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-loop-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d8492d5656292f0b10ac0a2758b0bd085123fa5534117d25dc8251e1cea79284</sum>
        </package>
        <package name="libblockdev-part-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-part-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">de2c1ff5dc5f27794f9ea61961d2c81568b23c1a7238dd4909a96ee9d4257a9e</sum>
        </package>
        <package name="libblockdev-vdo-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-vdo-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e6d43543dda54d78d815722d0fab0f84a3ca0664069ed2d45fac3306acf98f0b</sum>
        </package>
        <package name="libblockdev-swap-devel" version="2.28" release="7.el8_10" epoch="0" arch="aarch64" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-swap-devel-2.28-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f5f09409d30f78d5327712335e8602dc1b129987a8fe65193006ec5c7401c8f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:A004</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-20 00:00:00"/>
    <updated date="2025-06-20 14:58:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

* libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-A004.html" id="ALSA-2025:A004" type="self" title="ALSA-2025:A004"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libblockdev-lvm-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-lvm-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3126ad75a3517aaf0499dbea24151ffdf8084e4113ac1cd010cc6fbbf08a3db9</sum>
        </package>
        <package name="libblockdev-vdo-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-vdo-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">3c3779b96f97ea872305a5c1139ce001ba9470ff3b906d4db7df76249b294e6a</sum>
        </package>
        <package name="libblockdev-loop-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-loop-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">595c4f510022ccf07912193525dd2a64c9f1ca8b3a6441799919a1db1bc4cdf6</sum>
        </package>
        <package name="libblockdev-crypto-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-crypto-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">672262212c91602fdfac0144ba5dfb1832984207a7a5e6cb8dba1a5c339a58ec</sum>
        </package>
        <package name="libblockdev-utils-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-utils-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">6e11789911249fb5f5604c4f8be07354d7373097e749a680991741453579602d</sum>
        </package>
        <package name="libblockdev-mdraid-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-mdraid-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">787f8d1b70ed68d0707bd2aa8f5c36082590c100961da4786ca8e36ce8fa48ef</sum>
        </package>
        <package name="libblockdev-fs-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-fs-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">a929aa120b4bdcae3868a9ed90819f92b16b134f334cece02a15dd5aba31eaa6</sum>
        </package>
        <package name="libblockdev-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">af4a74f72703e13036586d0a6d91239acb30d10def16386bb3d333e941c8ce13</sum>
        </package>
        <package name="libblockdev-part-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-part-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">b72f3e9448d39e529a7cc7948318c0b9fe7947d528eba94412faf183d9852d1e</sum>
        </package>
        <package name="libblockdev-swap-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="aarch64" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-swap-devel-2.28-6.el8.alma.1.aarch64.rpm</filename>
          <sum type="sha256">faff036922cb33e2725cd8a1d5441d0c3b605b05c55ebdeac729601b7b38fc29</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0123</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:18:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0123" id="RHSA-2026:0123" type="rhsa" title="RHSA-2026:0123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0123.html" id="ALSA-2026:0123" type="self" title="ALSA-2026:0123"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-idle" version="3.12.12" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">279e033d2d1f487fef5bd1b470d114569c4d5b1a0ba74627b3e1954fdab82106</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4afd659d646632e80ed9ed0d02ffcd8413a4f8d16ad956ca55da3a4acd504785</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="1.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5a6150304f6a44921b0f11138e993813c8b43c01b90840bc085e5963784d5457</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0130</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:26:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0130" id="RHSA-2026:0130" type="rhsa" title="RHSA-2026:0130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0130.html" id="ALSA-2026:0130" type="self" title="ALSA-2026:0130"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="poppler-cpp" version="20.11.0" release="13.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-cpp-20.11.0-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3105b200a7afb05aa93f853c71deb783a853778d4c36b5000b89e2547fc84da2</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-glib-devel-20.11.0-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">410f773b222f026816042412ec26061814ed200f5124328d4b4182d581bc7122</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-devel-20.11.0-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">417e80b2752f58d0b28e4dda41b979dc524a1b1ed0402ff34331fd3f6851d79b</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">cc918476b3d28f663f7c51c89f2e5dbe5961106020ab4900eca10e3d990aeef2</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="aarch64" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ed2097390b55c55544333b631c23e18b84f6197a15a9c1d142296f474970eedd</sum>
        </package>
        <package name="poppler-glib-doc" version="20.11.0" release="13.el8_10" epoch="0" arch="noarch" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-glib-doc-20.11.0-13.el8_10.noarch.rpm</filename>
          <sum type="sha256">f76a00715b7f950cba0c9ae04abaa8d0ad04f55dcf3ff25632c1000fffca95d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0444</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-12 00:00:00"/>
    <updated date="2026-01-16 15:34:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: media: rc: fix races with imon_disconnect() (CVE-2025-39993)
  * kernel: sctp: avoid NULL dereference when chunk data buffer is missing (CVE-2025-40240)
  * kernel: libceph: fix potential use-after-free in have_mon_and_osd_map() (CVE-2025-68285)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0444" id="RHSA-2026:0444" type="rhsa" title="RHSA-2026:0444"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39993" id="CVE-2025-39993" type="cve" title="CVE-2025-39993"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40240" id="CVE-2025-40240" type="cve" title="CVE-2025-40240"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68285" id="CVE-2025-68285" type="cve" title="CVE-2025-68285"/>
      <reference href="https://bugzilla.redhat.com/2404121" id="2404121" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418832" id="2418832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422801" id="2422801" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0444.html" id="ALSA-2026:0444" type="self" title="ALSA-2026:0444"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.92.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.92.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.92.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4c8426959a9c2c0dbc58bc0062a1136bab0cc73a5c2e8b0f5f56723399bc8b1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0756</id>
    <title>Moderate: transfig security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-19 10:24:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>transfig security update</summary>
    <description>The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.  

Security Fix(es):  

  * xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0756" id="RHSA-2026:0756" type="rhsa" title="RHSA-2026:0756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46397" id="CVE-2025-46397" type="cve" title="CVE-2025-46397"/>
      <reference href="https://bugzilla.redhat.com/2362058" id="2362058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0756.html" id="ALSA-2026:0756" type="self" title="ALSA-2026:0756"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="transfig" version="3.2.6a" release="5.el8_10" epoch="1" arch="aarch64" src="transfig-3.2.6a-5.el8_10.src.rpm">
          <filename>transfig-3.2.6a-5.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c4426557615bb3bd5ebdb2e01bf84af72ac72d98b47429b7c221ea569e0d41d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0759</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-20 08:05:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)
  * kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  * kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552)
  * kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  * kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0759" id="RHSA-2026:0759" type="rhsa" title="RHSA-2026:0759"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53552" id="CVE-2023-53552" type="cve" title="CVE-2023-53552"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38051" id="CVE-2025-38051" type="cve" title="CVE-2025-38051"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39933" id="CVE-2025-39933" type="cve" title="CVE-2025-39933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40096" id="CVE-2025-40096" type="cve" title="CVE-2025-40096"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68301" id="CVE-2025-68301" type="cve" title="CVE-2025-68301"/>
      <reference href="https://bugzilla.redhat.com/2373329" id="2373329" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401432" id="2401432" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2401514" id="2401514" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2407333" id="2407333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2422836" id="2422836" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0759.html" id="ALSA-2026:0759" type="self" title="ALSA-2026:0759"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.94.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.94.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.94.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">780f3a6a42d204c737f0a7f574d5696aad322276527350b146d2e7e399a80a43</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0927</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:52:06"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0927" id="RHSA-2026:0927" type="rhsa" title="RHSA-2026:0927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0927.html" id="ALSA-2026:0927" type="self" title="ALSA-2026:0927"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">236658c376ead5496176e4bd290d7ad571c4a3adca942428a7fc52cf8c6ec2ac</sum>
        </package>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2ea61dd02662955ab57a5143b8b0322cad08d67c53bf0d264e5b92ff74476d28</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">3ca05aa2c0491eda404a3083ed119d7fbfcaa9e11ba5e92f49674f321fc92869</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">443b9b6792b10ff918d89104e1422ada4559d65959bab25042f8252dbda0aea1</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">44d9911ecd1e2cfc0514a10fa27812b9f58e8cac5bb581cbbe8b5d5a9a280ead</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">5c8c23d5c051996f8dd5dc27e02aa892bdaf2d93be431006280e79332f475f25</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">61f118b414f3c6a47569880bcf714cf9dde99815aa23da30cd02ea65bd1b3e72</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6c16d9cbf6387efe3ef1051422874ced36a49baa6c7fddc401eab98601a1c349</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">719df46e26c920659c766c5f1ce9e9d5f829ae294006717c12875ca2294752e1</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">89a382e0d32b0faf3bf8a80ca4612d864ecf1a88e4150ed9f763d4e2412673f8</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">8a7acd2866ea7b0b3c89d7f572d624746a4952b2b065af85eb9b24368648e430</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">95630d29ffcc6f18ac1ebdb8a95f4ee5ff740b26449b46a01bdaa060c1bceee5</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">dd99f26b82bb004f45ee5c55c776b26bf6073a6db8386715fe1a84f83aa9e1a7</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el8.aarch64.rpm</filename>
          <sum type="sha256">fb1f39629a1a825f8f9121316bb5192c8c8b8cd51c45b4f2c96a5ba2f820f35b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-26 11:04:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">00143a36e2f4bf8aae1a5fbfff69fce804411f65b1ba9b64881c762e1f90abb6</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0e6528a603c5fed3fe2f0c34e420f9a28e3464d966968ae372ee605a7773abb0</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">170631fc9379368aae15ffce6725d8aa353aa0b4c26998e261457574587de4d8</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4ca22a6a259e0c0fae7e80d32fbb75a109fb65236a0ea31e88be2c40555430ac</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">64628d9ab357316b0620de73a30ff77b20774434a65ce7bdc59916ae2fe8daa7</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">71ed9523537c48f6c39dc19006c3aa24d63c929b69e942b1e235681711873d74</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">78d9bf27394c84d2f58d309c1710fbef71fe8450f799b5233c698d658d1ab4e8</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">84b1d4ea5eec941f760c16da2dc11fc900f6f23ae6049231f57923179269e620</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c59cafa7a173093f013dec85a9629bd466d94394d482c715f5d65ab51a297aba</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">cc3edd9f4050597a3e066b02b6570b35e42a76af6001d00178a8deaa4ab7cec2</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">d1636ef506eb59e2d3a425d5a6b2bdb78ab679a2f80446d7eafe8cee81575f2a</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">d6741ac99f3d6491032d93c972e6655a5941dd9bff3831a1fa2b8ab019b02253</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f0bb2375ef87b60294face945fcc3401acac86b5a897de53336862cbdbcf12d9</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.10.0.7-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f0bb5c404d35c2cbc5bc35c519c68f25910b579c4ca9db07bac8c7962f98956f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0932</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-28 07:05:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142865, AlmaLinux-142866, AlmaLinux-142867, AlmaLinux-142868, AlmaLinux-142869, AlmaLinux-142870, AlmaLinux-142871, AlmaLinux-142872, AlmaLinux-142873, AlmaLinux-142874)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0932" id="RHSA-2026:0932" type="rhsa" title="RHSA-2026:0932"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0932.html" id="ALSA-2026:0932" type="self" title="ALSA-2026:0932"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">170bb7f1db5a2900d6a1173d4273e5db3966a46aea521966bb1d3b94cdf86036</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">3d7e1f61b9dd29db66c6590378d7e19e32928b8ed1d5f1234a9a721d58f02c27</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">452640328c068f50c0ba314b15e2f724bebdea9c10dc9f9b6982f974b6c5e9ce</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">805693523f907e76a6005add4ee220218b68a25285742692170dbe74598b729d</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ac869af04beb387fb36d2ed19ef52e001a694993857734fa0b818ffce445b0ad</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ae1e9ee1b985262ed0033deff9a933dc43c1f58abade5f75a6c26033d15dd2b0</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c56f0757c48fd2c3f75ffbcb59c7a5e74f8da7ec1f2e0a23ad87c2f42dd75a4f</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.482.b08" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.482.b08-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.482.b08-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e213c41e4e3c0998948a2ce868a86810f506fd94f5346757c7ade2829982fc78</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0991</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:40:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0991" id="RHSA-2026:0991" type="rhsa" title="RHSA-2026:0991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0991.html" id="ALSA-2026:0991" type="self" title="ALSA-2026:0991"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="glib2-static" version="2.56.4" release="168.el8_10" epoch="0" arch="aarch64" src="glib2-2.56.4-168.el8_10.src.rpm">
          <filename>glib2-static-2.56.4-168.el8_10.aarch64.rpm</filename>
          <sum type="sha256">47b0be8fc2efe8aeb052abd9e31124c25ee4157af5ea53002a91b909e40ca9aa</sum>
        </package>
        <package name="glib2-doc" version="2.56.4" release="168.el8_10" epoch="0" arch="noarch" src="glib2-2.56.4-168.el8_10.src.rpm">
          <filename>glib2-doc-2.56.4-168.el8_10.noarch.rpm</filename>
          <sum type="sha256">d84003e17d8a0a3b0d6a34e0fa7729433f275b7aad762ad65efc606d27f169b1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10741</id>
    <title>Important: gdk-pixbuf2 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:29:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10741" id="RHSA-2026:10741" type="rhsa" title="RHSA-2026:10741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5201" id="CVE-2026-5201" type="cve" title="CVE-2026-5201"/>
      <reference href="https://bugzilla.redhat.com/2453291" id="2453291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10741.html" id="ALSA-2026:10741" type="self" title="ALSA-2026:10741"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="8.el8_10" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-8.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-8.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f1de9122a7d48c828b9852a64ee5c18881fd1ff7da91237e56f0ac5b287a195d</sum>
        </package>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="8.el8_10" epoch="0" arch="aarch64" src="gdk-pixbuf2-2.36.12-8.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-8.el8_10.aarch64.rpm</filename>
          <sum type="sha256">f6ee735d09bb8b3ae8381e7d8144370ff1ed4ea758eabdf9e8110e96b7fd11ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10950</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:40:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10950" id="RHSA-2026:10950" type="rhsa" title="RHSA-2026:10950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13837" id="CVE-2025-13837" type="cve" title="CVE-2025-13837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15282" id="CVE-2025-15282" type="cve" title="CVE-2025-15282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0672" id="CVE-2026-0672" type="cve" title="CVE-2026-0672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418084" id="2418084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431366" id="2431366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431374" id="2431374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10950.html" id="ALSA-2026:10950" type="self" title="ALSA-2026:10950"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.13" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.13-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0042421786a365124d2ca4d725f92241860a7f2376498f2ee43616af03e3f6b0</sum>
        </package>
        <package name="python3.12-idle" version="3.12.13" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.13-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">644628ba7ff8d0b59f4e33245f0fa93c8f629872c5f2baffe206cb2398923aeb</sum>
        </package>
        <package name="python3.12-debug" version="3.12.13" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.13-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">961ea35f60185ce0e7a46217da702062f18adaf20826cd10846f051430b238be</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11062</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:42:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11062" id="RHSA-2026:11062" type="rhsa" title="RHSA-2026:11062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11062.html" id="ALSA-2026:11062" type="self" title="ALSA-2026:11062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.13" release="7.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">23a60cc29c830094c1c86e94c32bf5dc10e45acbc73f5c2c8178302f6ec63166</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="7.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4f248d7a1f17bee57236958d7227bd6b6d3c6b23e006c2becac35f42549c3baa</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="7.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">d803d7c135a972a196b96c67952eba39c1a2a6340632a290e5f6571f9093a789</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1142</id>
    <title>Important: kernel security update</title>
    <issued date="2026-01-26 00:00:00"/>
    <updated date="2026-01-26 13:49:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Bluetooth: hci_event: call disconnect callback before deleting conn (CVE-2023-53673)
  * kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CVE-2025-40154)
  * kernel: Linux kernel: vsock vulnerability may lead to memory corruption (CVE-2025-40248)
  * kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CVE-2025-40277)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1142" id="RHSA-2026:1142" type="rhsa" title="RHSA-2026:1142"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53673" id="CVE-2023-53673" type="cve" title="CVE-2023-53673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40154" id="CVE-2025-40154" type="cve" title="CVE-2025-40154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40248" id="CVE-2025-40248" type="cve" title="CVE-2025-40248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40277" id="CVE-2025-40277" type="cve" title="CVE-2025-40277"/>
      <reference href="https://bugzilla.redhat.com/2402193" id="2402193" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414494" id="2414494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418872" id="2418872" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419954" id="2419954" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1142.html" id="ALSA-2026:1142" type="self" title="ALSA-2026:1142"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.97.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.97.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.97.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">858f0ac0c556bb4a4a87004710e91d150249a1330a4c049596b534ac18b0e045</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11635</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-29 12:49:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11635" id="RHSA-2026:11635" type="rhsa" title="RHSA-2026:11635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11635.html" id="ALSA-2026:11635" type="self" title="ALSA-2026:11635"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="PackageKit-glib-devel" version="1.1.12" release="8.el8_10" epoch="0" arch="aarch64" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-glib-devel-1.1.12-8.el8_10.aarch64.rpm</filename>
          <sum type="sha256">7b35c9137c76972b49b32ec977fe3c0ce606ebd2f6cb6a3b8231612aa9106129</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11692</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 07:07:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11692" id="RHSA-2026:11692" type="rhsa" title="RHSA-2026:11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11692.html" id="ALSA-2026:11692" type="self" title="ALSA-2026:11692"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="28.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-28.el8_10.noarch.rpm</filename>
          <sum type="sha256">365a95d1f6d63795eb2e8caba5731a72ed7ea60f73616d61ce93798da5e43e1e</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="28.el8_10" epoch="0" arch="aarch64" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-28.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3afd975a7ff28159f2f3a6f6ce9c1d612acf732cc5d3b7d1f919b02639ae2211</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13577</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-05 10:32:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nvme: avoid double free special payload (CVE-2024-41073)
  * kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (CVE-2025-40252)
  * kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
  * kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  * kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13577" id="RHSA-2026:13577" type="rhsa" title="RHSA-2026:13577"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-41073" id="CVE-2024-41073" type="cve" title="CVE-2024-41073"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40252" id="CVE-2025-40252" type="cve" title="CVE-2025-40252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68724" id="CVE-2025-68724" type="cve" title="CVE-2025-68724"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23401" id="CVE-2026-23401" type="cve" title="CVE-2026-23401"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31402" id="CVE-2026-31402" type="cve" title="CVE-2026-31402"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/2301637" id="2301637" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424886" id="2424886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453803" id="2453803" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2454844" id="2454844" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2460538" id="2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13577.html" id="ALSA-2026:13577" type="self" title="ALSA-2026:13577"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.123.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.123.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.123.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">415ebda994bcbf8e326dcb2baba1d54dd8045f3f247b3163aac51b4da65e9969</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13657</id>
    <title>Moderate: corosync security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-06 08:44:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13657" id="RHSA-2026:13657" type="rhsa" title="RHSA-2026:13657"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35091" id="CVE-2026-35091" type="cve" title="CVE-2026-35091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35092" id="CVE-2026-35092" type="cve" title="CVE-2026-35092"/>
      <reference href="https://bugzilla.redhat.com/2453813" id="2453813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453814" id="2453814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13657.html" id="ALSA-2026:13657" type="self" title="ALSA-2026:13657"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="corosync-vqsim" version="3.1.8" release="1.el8_10.1" epoch="0" arch="aarch64" src="corosync-3.1.8-1.el8_10.1.src.rpm">
          <filename>corosync-vqsim-3.1.8-1.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">2f56d04fa513ea38dd056de973bdac324cc0197412328ff8c66b7ebb88df8dd3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1374</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:10:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1374" id="RHSA-2026:1374" type="rhsa" title="RHSA-2026:1374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1374.html" id="ALSA-2026:1374" type="self" title="ALSA-2026:1374"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.13" release="4.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2676bae0dbefc22e35ffc6a3887048a38b9d6cf3e286b0592fb995d9a0124b46</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="4.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">b0c541db1d6cb785be4ce362bf4b7202488b6be617096ba914d75749a14dd051</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="4.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">e10da71877aeaf34668f8521aca19e499f690f81a630d853d064dda633f13397</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13830</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-05 19:20:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13830" id="RHSA-2026:13830" type="rhsa" title="RHSA-2026:13830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13830.html" id="ALSA-2026:13830" type="self" title="ALSA-2026:13830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dovecot-devel" version="2.3.16" release="7.el8_10" epoch="1" arch="aarch64" src="dovecot-2.3.16-7.el8_10.src.rpm">
          <filename>dovecot-devel-2.3.16-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">332de1de7db93332bf0d7cbc72cd0c7ac88ec720d7f5a70cb1cffc09626760c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:14929</id>
    <title>Important: mingw-libtiff security update</title>
    <issued date="2026-05-07 00:00:00"/>
    <updated date="2026-05-07 23:01:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-libtiff security update</summary>
    <description>The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:14929" id="RHSA-2026:14929" type="rhsa" title="RHSA-2026:14929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-14929.html" id="ALSA-2026:14929" type="self" title="ALSA-2026:14929"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw32-libtiff-static" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw32-libtiff-static-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">4a902d487e164530bfe72acbe7678852c86f9bba5aa4f7ddd5ae778e740e1b84</sum>
        </package>
        <package name="mingw32-libtiff" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw32-libtiff-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">4b0ea04e011300345ac7cdeeb190713afbd2d0bfd97452c3cf5cb7c3b662e0d3</sum>
        </package>
        <package name="mingw64-libtiff" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw64-libtiff-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">8cb0e33b9d810181244d20c7ad02eb444407393a2c6009be85aa5ad3e6f29f47</sum>
        </package>
        <package name="mingw64-libtiff-static" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw64-libtiff-static-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">c9cf3e35258054c54762a0eeabd8204d3c24052c90f76b9fa15c4743305af717</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1662</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-02 00:00:00"/>
    <updated date="2026-02-02 13:45:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: IB/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one error (CVE-2024-26766)
  * kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  * kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)
  * kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  * kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)
  * kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  * kernel: mptcp: fix race condition in mptcp_schedule_work() (CVE-2025-40258)
  * kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  * kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  * kernel: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (CVE-2022-50865)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1662" id="RHSA-2026:1662" type="rhsa" title="RHSA-2026:1662"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50865" id="CVE-2022-50865" type="cve" title="CVE-2022-50865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26766" id="CVE-2024-26766" type="cve" title="CVE-2024-26766"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38022" id="CVE-2025-38022" type="cve" title="CVE-2025-38022"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38024" id="CVE-2025-38024" type="cve" title="CVE-2025-38024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38415" id="CVE-2025-38415" type="cve" title="CVE-2025-38415"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38459" id="CVE-2025-38459" type="cve" title="CVE-2025-38459"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-39760" id="CVE-2025-39760" type="cve" title="CVE-2025-39760"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40258" id="CVE-2025-40258" type="cve" title="CVE-2025-40258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40271" id="CVE-2025-40271" type="cve" title="CVE-2025-40271"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40322" id="CVE-2025-40322" type="cve" title="CVE-2025-40322"/>
      <reference href="https://bugzilla.redhat.com/2273187" id="2273187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373326" id="2373326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373354" id="2373354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383404" id="2383404" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2383487" id="2383487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2394601" id="2394601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418876" id="2418876" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419837" id="2419837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419902" id="2419902" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426226" id="2426226" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1662.html" id="ALSA-2026:1662" type="self" title="ALSA-2026:1662"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.100.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.100.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.100.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0dbbabae9722b7164018668e8ecd1061548bf411953028732fb96da91dc20826</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1852</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-03 00:00:00"/>
    <updated date="2026-02-10 08:33:36"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1852" id="RHSA-2026:1852" type="rhsa" title="RHSA-2026:1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1852.html" id="ALSA-2026:1852" type="self" title="ALSA-2026:1852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libmount-devel" version="2.32.1" release="48.el8_10" epoch="0" arch="aarch64" src="util-linux-2.32.1-48.el8_10.src.rpm">
          <filename>libmount-devel-2.32.1-48.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c6fc159e3f2c8f1c30df2d2c36e8dfb6d2a8c56119e9520e40a5236092288c06</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2081</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:53:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)
  * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
  * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)
  * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)
  * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2081" id="RHSA-2026:2081" type="rhsa" title="RHSA-2026:2081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23530" id="CVE-2026-23530" type="cve" title="CVE-2026-23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23531" id="CVE-2026-23531" type="cve" title="CVE-2026-23531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23532" id="CVE-2026-23532" type="cve" title="CVE-2026-23532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23533" id="CVE-2026-23533" type="cve" title="CVE-2026-23533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23534" id="CVE-2026-23534" type="cve" title="CVE-2026-23534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23883" id="CVE-2026-23883" type="cve" title="CVE-2026-23883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23884" id="CVE-2026-23884" type="cve" title="CVE-2026-23884"/>
      <reference href="https://bugzilla.redhat.com/2430877" id="2430877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430880" id="2430880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430885" id="2430885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430886" id="2430886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430887" id="2430887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430888" id="2430888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430891" id="2430891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2081.html" id="ALSA-2026:2081" type="self" title="ALSA-2026:2081"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="2.el8_10" epoch="2" arch="aarch64" src="freerdp-2.11.7-2.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ebe31130fd885d13b23ba53f19f2f7f71c47991792c91c70faf03d5147c7fc05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2090</id>
    <title>Important: python3.12-wheel security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:49:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2090" id="RHSA-2026:2090" type="rhsa" title="RHSA-2026:2090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2090.html" id="ALSA-2026:2090" type="self" title="ALSA-2026:2090"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-wheel-wheel" version="0.41.2" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-wheel-0.41.2-4.el8_10.src.rpm">
          <filename>python3.12-wheel-wheel-0.41.2-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">f2972c4c79c00c3b75dc72eb6ae5464b142a712b5e7edf91003658672185d0e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2264</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-09 00:00:00"/>
    <updated date="2026-02-09 11:47:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  * kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  * kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  * kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  * kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  * kernel: ext4: fix use-after-free in ext4_orphan_cleanup (CVE-2022-50673)
  * kernel: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CVE-2025-68349)
  * kernel: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CVE-2026-22998)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2264" id="RHSA-2026:2264" type="rhsa" title="RHSA-2026:2264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-50673" id="CVE-2022-50673" type="cve" title="CVE-2022-50673"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38403" id="CVE-2025-38403" type="cve" title="CVE-2025-38403"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40135" id="CVE-2025-40135" type="cve" title="CVE-2025-40135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40158" id="CVE-2025-40158" type="cve" title="CVE-2025-40158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40170" id="CVE-2025-40170" type="cve" title="CVE-2025-40170"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40269" id="CVE-2025-40269" type="cve" title="CVE-2025-40269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68349" id="CVE-2025-68349" type="cve" title="CVE-2025-68349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22998" id="CVE-2026-22998" type="cve" title="CVE-2026-22998"/>
      <reference href="https://bugzilla.redhat.com/2383421" id="2383421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414506" id="2414506" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414521" id="2414521" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2414523" id="2414523" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419919" id="2419919" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2420347" id="2420347" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2424880" id="2424880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432671" id="2432671" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2264.html" id="ALSA-2026:2264" type="self" title="ALSA-2026:2264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.104.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.104.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">0e6bd3222ace568280a0afabc2bffddb0a882b1f9237033d0719b917bfd33f00</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2419</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-11 15:30:12"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2419" id="RHSA-2026:2419" type="rhsa" title="RHSA-2026:2419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2419.html" id="ALSA-2026:2419" type="self" title="ALSA-2026:2419"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-debug" version="3.12.12" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">65ef0e907d4d4d27a96cee9d0c34cb6848ebb372cfe97ac55869c836bb945a47</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6ca3f166615881583706e41542793772c9cb18de114f2845f7dc6f5216f960d2</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="2.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-2.el8_10.aarch64.rpm</filename>
          <sum type="sha256">6fecb290fec55cb7526780628422074bd7e0182c6a6b0bd0b7df3d08a7c9994b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2720</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-02-16 00:00:00"/>
    <updated date="2026-02-23 13:27:14"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (CVE-2025-40168)
  * kernel: Linux kernel Bluetooth: Denial of Service due to use-after-free in connection handling (CVE-2023-53762)
  * kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2720" id="RHSA-2026:2720" type="rhsa" title="RHSA-2026:2720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-53762" id="CVE-2023-53762" type="cve" title="CVE-2023-53762"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40168" id="CVE-2025-40168" type="cve" title="CVE-2025-40168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40304" id="CVE-2025-40304" type="cve" title="CVE-2025-40304"/>
      <reference href="https://bugzilla.redhat.com/2414482" id="2414482" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419838" id="2419838" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2419870" id="2419870" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2720.html" id="ALSA-2026:2720" type="self" title="ALSA-2026:2720"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.105.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.105.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.105.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5dc99e47071f7e7589ea44480138e45cbaad5913c54eb197b975f8a527d615cd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3032</id>
    <title>Important: munge security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-23 14:44:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>munge security update</summary>
    <description>MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.  

Security Fix(es):  

  * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3032" id="RHSA-2026:3032" type="rhsa" title="RHSA-2026:3032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25506" id="CVE-2026-25506" type="cve" title="CVE-2026-25506"/>
      <reference href="https://bugzilla.redhat.com/2438715" id="2438715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3032.html" id="ALSA-2026:3032" type="self" title="ALSA-2026:3032"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="munge-devel" version="0.5.13" release="3.el8_10" epoch="0" arch="aarch64" src="munge-0.5.13-3.el8_10.src.rpm">
          <filename>munge-devel-0.5.13-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">8c7df92e1fd2dd231808e3b21c2be3dcaa8bc7fa047fa950af0bce6db3ba8376</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3083</id>
    <title>Important: kernel security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-24 12:59:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  * kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init (CVE-2025-38248)
  * kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  * kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
  * kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation (CVE-2026-23074)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3083" id="RHSA-2026:3083" type="rhsa" title="RHSA-2026:3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38129" id="CVE-2025-38129" type="cve" title="CVE-2025-38129"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38248" id="CVE-2025-38248" type="cve" title="CVE-2025-38248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40064" id="CVE-2025-40064" type="cve" title="CVE-2025-40064"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68800" id="CVE-2025-68800" type="cve" title="CVE-2025-68800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23074" id="CVE-2026-23074" type="cve" title="CVE-2026-23074"/>
      <reference href="https://bugzilla.redhat.com/2376034" id="2376034" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2378981" id="2378981" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2406747" id="2406747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429065" id="2429065" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2436791" id="2436791" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3083.html" id="ALSA-2026:3083" type="self" title="ALSA-2026:3083"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.107.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.107.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.107.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4c1d22a458bb11641ed65e58a7f416512d8812d7b15886c942418c7004f93b92</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3334</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 09:39:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3334" id="RHSA-2026:3334" type="rhsa" title="RHSA-2026:3334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22855" id="CVE-2026-22855" type="cve" title="CVE-2026-22855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22858" id="CVE-2026-22858" type="cve" title="CVE-2026-22858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22859" id="CVE-2026-22859" type="cve" title="CVE-2026-22859"/>
      <reference href="https://bugzilla.redhat.com/2429645" id="2429645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429649" id="2429649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429653" id="2429653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3334.html" id="ALSA-2026:3334" type="self" title="ALSA-2026:3334"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="3.el8_10" epoch="2" arch="aarch64" src="freerdp-2.11.7-3.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c0f99cfef03e1ad9cd52bd86092552c905ee04e62a63cd9387a43ddc65c9db5c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3407</id>
    <title>Important: mingw-fontconfig security update</title>
    <issued date="2026-02-26 00:00:00"/>
    <updated date="2026-03-02 15:16:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-fontconfig security update</summary>
    <description>MinGW Windows Fontconfig library.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3407" id="RHSA-2026:3407" type="rhsa" title="RHSA-2026:3407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3407.html" id="ALSA-2026:3407" type="self" title="ALSA-2026:3407"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw64-fontconfig" version="2.12.6" release="4.el8_10" epoch="0" arch="noarch" src="mingw-fontconfig-2.12.6-4.el8_10.src.rpm">
          <filename>mingw64-fontconfig-2.12.6-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">16f214735b967fabb3c11045ccf98e10732abe4cc8ed318a9b267cf3c3d685a8</sum>
        </package>
        <package name="mingw32-fontconfig" version="2.12.6" release="4.el8_10" epoch="0" arch="noarch" src="mingw-fontconfig-2.12.6-4.el8_10.src.rpm">
          <filename>mingw32-fontconfig-2.12.6-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">1b44343b712cc0b7e26c087c3571c3cb404f8063bc443d4f72f64e8ea9ccdfff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3464</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-02 00:00:00"/>
    <updated date="2026-03-03 15:09:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Denial of Service due to a deadlock in hugetlb folio migration (CVE-2026-23097)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3464" id="RHSA-2026:3464" type="rhsa" title="RHSA-2026:3464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23097" id="CVE-2026-23097" type="cve" title="CVE-2026-23097"/>
      <reference href="https://bugzilla.redhat.com/2436802" id="2436802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3464.html" id="ALSA-2026:3464" type="self" title="ALSA-2026:3464"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.109.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.109.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.109.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">57780b022f896844c8cd55fbc2dbd46fde5c7d1a83e054bb2d147d17888bd4e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3938</id>
    <title>Moderate: nfs-utils security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-10 01:58:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nfs-utils security update</summary>
    <description>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.   

Security Fix(es):  

  * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3938" id="RHSA-2026:3938" type="rhsa" title="RHSA-2026:3938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12801" id="CVE-2025-12801" type="cve" title="CVE-2025-12801"/>
      <reference href="https://bugzilla.redhat.com/2413081" id="2413081" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3938.html" id="ALSA-2026:3938" type="self" title="ALSA-2026:3938"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libnfsidmap-devel" version="2.3.3" release="68.el8_10" epoch="1" arch="aarch64" src="nfs-utils-2.3.3-68.el8_10.src.rpm">
          <filename>libnfsidmap-devel-2.3.3-68.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5e91ac896e9856fe8fa6f3b8fb0fa6ceeff9b2b802a15ae7ba35019a4c02bd6d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3963</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-10 02:04:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085)
  * kernel: macvlan: fix possible UAF in macvlan_forward_source() (CVE-2026-23001)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3963" id="RHSA-2026:3963" type="rhsa" title="RHSA-2026:3963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71085" id="CVE-2025-71085" type="cve" title="CVE-2025-71085"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23001" id="CVE-2026-23001" type="cve" title="CVE-2026-23001"/>
      <reference href="https://bugzilla.redhat.com/2429026" id="2429026" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432664" id="2432664" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3963.html" id="ALSA-2026:3963" type="self" title="ALSA-2026:3963"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.111.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.111.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.111.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">07f918494c2880253424775ac39120ce1c80c0cc41274766b32bf7fb6b02ddd8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3967</id>
    <title>Important: libvpx security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-10 01:53:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3967" id="RHSA-2026:3967" type="rhsa" title="RHSA-2026:3967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3967.html" id="ALSA-2026:3967" type="self" title="ALSA-2026:3967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libvpx-devel" version="1.7.0" release="13.el8_10" epoch="0" arch="aarch64" src="libvpx-1.7.0-13.el8_10.src.rpm">
          <filename>libvpx-devel-1.7.0-13.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1ca92a7c85638bb898a6ff7936f10638ab6b1ccba6c32182b12d73fece8b4f50</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4306</id>
    <title>Important: mingw-libpng security update</title>
    <issued date="2026-03-11 00:00:00"/>
    <updated date="2026-03-13 12:35:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-libpng security update</summary>
    <description>MinGW Windows Libpng library.  

Security Fix(es):  

  * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801)
  * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695)
  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4306" id="RHSA-2026:4306" type="rhsa" title="RHSA-2026:4306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22695" id="CVE-2026-22695" type="cve" title="CVE-2026-22695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22801" id="CVE-2026-22801" type="cve" title="CVE-2026-22801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2428824" id="2428824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428825" id="2428825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4306.html" id="ALSA-2026:4306" type="self" title="ALSA-2026:4306"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="mingw32-libpng-static" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw32-libpng-static-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">1b4e866aa9f12c2b2a8503a8ece57d9e31c842b3c25daa95087424b216072618</sum>
        </package>
        <package name="mingw32-libpng" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw32-libpng-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">6629fc3c6dac20f23fbfdf09f1a9f6c186a37da8dce090e014bfc8e19fda9dd3</sum>
        </package>
        <package name="mingw64-libpng" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw64-libpng-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">6b85fa312b59c2397301d6448c684841831e6083445797611d5a055b6e9adfb3</sum>
        </package>
        <package name="mingw64-libpng-static" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw64-libpng-static-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">e201770a44f5e037fcc204982c4aa02ebcba03dd6295ed9ff60025246890cad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4443</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:01:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4443" id="RHSA-2026:4443" type="rhsa" title="RHSA-2026:4443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4443.html" id="ALSA-2026:4443" type="self" title="ALSA-2026:4443"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.115" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">895eb72809ba94971709aa69960bf368e61d73ad6dc8a81231dc3afb12cb8908</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4455</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:11:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):  

  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4455" id="RHSA-2026:4455" type="rhsa" title="RHSA-2026:4455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4455.html" id="ALSA-2026:4455" type="self" title="ALSA-2026:4455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.125" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">8b5510869002f5b51f36d263a6871fbf44bb3f58b5cea5a7e98d8e304b4a2ab5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4458</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:14:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4458" id="RHSA-2026:4458" type="rhsa" title="RHSA-2026:4458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4458.html" id="ALSA-2026:4458" type="self" title="ALSA-2026:4458"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.104" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">49dd8356ed0bbc27492dbb73ab2fea301c4afc8a7626adf72aaf5f743b802cec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4463</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:03:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4463" id="RHSA-2026:4463" type="rhsa" title="RHSA-2026:4463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4463.html" id="ALSA-2026:4463" type="self" title="ALSA-2026:4463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-debug" version="3.12.12" release="3.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">2bf8152191b15fd3a50aff07d33081917dfb83f86c3aa8cdfb05716b3e8aac4f</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="3.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">860155fdf2d388b784e03d8417eb6b5178fd0989151eae5441dce5f853dea4da</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="3.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-3.el8_10.aarch64.rpm</filename>
          <sum type="sha256">dae1169e3ee05d4b939ad966d7be6ac77fdbda2115b13bebdbfdc82ff3c49feb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4473</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-19 12:33:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4473" id="RHSA-2026:4473" type="rhsa" title="RHSA-2026:4473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4473.html" id="ALSA-2026:4473" type="self" title="ALSA-2026:4473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.13" release="5.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-5.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ac1c7d501d48b52c9eeca9bcae606674c1953d83a28412a42ebdee0dbb9b459c</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="5.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-5.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c2b90d82adc8bf708862dd0d2079f4c88088708fa4423e5b1e779e92c431b1b0</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="5.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-5.el8_10.aarch64.rpm</filename>
          <sum type="sha256">db2a0ab344581719279cc95d50198ad6907e9d9cabda0c3ed0ed87d76ef82f3e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5578</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 12:58:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5578" id="RHSA-2026:5578" type="rhsa" title="RHSA-2026:5578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11234" id="CVE-2025-11234" type="cve" title="CVE-2025-11234"/>
      <reference href="https://bugzilla.redhat.com/2401209" id="2401209" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5578.html" id="ALSA-2026:5578" type="self" title="ALSA-2026:5578"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="aarch64"/>
        <package name="ocaml-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="aarch64" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">07a8050c7528e71c17f620c328bcb89bc9c0a4a4791d6035465b202685f2242f</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">3a87b7e06b81631f1d1fab061ecbae983e7423fc0ee68feb583e182dbfcb75cc</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="aarch64" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.aarch64.rpm</filename>
          <sum type="sha256">4fda285299d2ce4222788ee8c21244be7f2a778777b61f5f884e9c06babfd735</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">729b91df0bcfd83d176d5f6c364d40e6122b728b999dae3f513e108d5d42445c</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="aarch64" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-53.module_el8.10.0+4110+4a319788.6.aarch64.rpm</filename>
          <sum type="sha256">88ad1a3e7e4e4deeaf884f9db3f7f3e4fae1e508c79a6548410d05f302099bc9</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="aarch64" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.aarch64.rpm</filename>
          <sum type="sha256">bcc9f65eb02413e9a06d3b6d52f9abb1ca36a40f36146760fcf1e6e92033732f</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+2880+7d9e3703" epoch="0" arch="aarch64" src="hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.aarch64.rpm</filename>
          <sum type="sha256">f43ed00bd42b77dd1a222775fde9b7c62fe20611b0c8f0397f0e1926a7f83c34</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5587</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 10:46:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following (CVE-2026-23893)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5587" id="RHSA-2026:5587" type="rhsa" title="RHSA-2026:5587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23893" id="CVE-2026-23893" type="cve" title="CVE-2026-23893"/>
      <reference href="https://bugzilla.redhat.com/2431909" id="2431909" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5587.html" id="ALSA-2026:5587" type="self" title="ALSA-2026:5587"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="opencryptoki-devel" version="3.22.0" release="3.el8_10.2" epoch="0" arch="aarch64" src="opencryptoki-3.22.0-3.el8_10.2.src.rpm">
          <filename>opencryptoki-devel-3.22.0-3.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">105b6410e1772215b32b6ad0aa3beaf3809651eb28197ebf686c05878108effe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6005</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:59:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6005" id="RHSA-2026:6005" type="rhsa" title="RHSA-2026:6005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26955" id="CVE-2026-26955" type="cve" title="CVE-2026-26955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26965" id="CVE-2026-26965" type="cve" title="CVE-2026-26965"/>
      <reference href="https://bugzilla.redhat.com/2442959" id="2442959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443132" id="2443132" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6005.html" id="ALSA-2026:6005" type="self" title="ALSA-2026:6005"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="4.el8_10" epoch="2" arch="aarch64" src="freerdp-2.11.7-4.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">26910bd725d4e6567146c583382f912f574646fb633161cc921d7a9f636d8b81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6037</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-03-30 10:54:58"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem (CVE-2025-38180)
  * kernel: macvlan: fix error recovery in macvlan_common_newlink() (CVE-2026-23209)
  * kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6037" id="RHSA-2026:6037" type="rhsa" title="RHSA-2026:6037"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-38180" id="CVE-2025-38180" type="cve" title="CVE-2025-38180"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23204" id="CVE-2026-23204" type="cve" title="CVE-2026-23204"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23209" id="CVE-2026-23209" type="cve" title="CVE-2026-23209"/>
      <reference href="https://bugzilla.redhat.com/2376376" id="2376376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439900" id="2439900" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439931" id="2439931" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6037.html" id="ALSA-2026:6037" type="self" title="ALSA-2026:6037"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.115.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.115.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.115.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">42d3b6a69cc5f5f48f48b32ab39f98bbbec3e60bac1b0d9b68864c3e5b2ca3d0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6281</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 08:52:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6281" id="RHSA-2026:6281" type="rhsa" title="RHSA-2026:6281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6281.html" id="ALSA-2026:6281" type="self" title="ALSA-2026:6281"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.11-idle" version="3.11.13" release="6.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1db6b4a4b345c6540f820a47cfe4930c9ec2b3c7c09c35db450eff26c2660c86</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="6.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">69d9f6b0fad820d689b2356a7632075bda716ca43f3129fa5638762cde06077c</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="6.el8_10" epoch="0" arch="aarch64" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ce22bc7a6c199ccb9097ff70d86d702cde3004272db163b9193f287760352564</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6283</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 08:56:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6283" id="RHSA-2026:6283" type="rhsa" title="RHSA-2026:6283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6283.html" id="ALSA-2026:6283" type="self" title="ALSA-2026:6283"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.12" release="4.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">a5a166bdde7b841c33182c219b65256466e543856e590efdb3692bd6513494fa</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="4.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">aaef9f5f133cbbcbf36d6008d88e111133b52add02fa6b13a1ceb4fcbd133e90</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="4.el8_10" epoch="0" arch="aarch64" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">eb3f582c8d436b1edd30e3a81ce242c9b8fdc013806e7504d44e9d7f31a73d81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6470</id>
    <title>Important: perl-YAML-Syck security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-03 12:07:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-YAML-Syck security update</summary>
    <description>This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around.  

Security Fix(es):  

  * perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter (CVE-2026-4177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6470" id="RHSA-2026:6470" type="rhsa" title="RHSA-2026:6470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4177" id="CVE-2026-4177" type="cve" title="CVE-2026-4177"/>
      <reference href="https://bugzilla.redhat.com/2448277" id="2448277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6470.html" id="ALSA-2026:6470" type="self" title="ALSA-2026:6470"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="perl-YAML-Syck" version="1.30" release="6.el8_10" epoch="0" arch="aarch64" src="perl-YAML-Syck-1.30-6.el8_10.src.rpm">
          <filename>perl-YAML-Syck-1.30-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">494e6440241fe5dab9dbf1f5d100c68e33e6481810bd1e814c9843fbac2977d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6571</id>
    <title>Moderate: kernel security update</title>
    <issued date="2026-04-06 00:00:00"/>
    <updated date="2026-04-06 09:20:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: nouveau: fix instmem race condition around ptr stores (CVE-2024-26984)
  * kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
  * kernel: kernel: Privilege escalation or denial of service via use-after-free in nf_tables_addchain() (CVE-2026-23231)
  * kernel: Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation. (CVE-2025-71238)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6571" id="RHSA-2026:6571" type="rhsa" title="RHSA-2026:6571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-26984" id="CVE-2024-26984" type="cve" title="CVE-2024-26984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-71238" id="CVE-2025-71238" type="cve" title="CVE-2025-71238"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23193" id="CVE-2026-23193" type="cve" title="CVE-2026-23193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23231" id="CVE-2026-23231" type="cve" title="CVE-2026-23231"/>
      <reference href="https://bugzilla.redhat.com/2278333" id="2278333" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439887" id="2439887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444376" id="2444376" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444398" id="2444398" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6571.html" id="ALSA-2026:6571" type="self" title="ALSA-2026:6571"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.117.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.117.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.117.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">063953af8b5fa29edef852fcf7f729656c038fb6b59f481f0fb2f491bfd1fe56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6750</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 12:28:23"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6750" id="RHSA-2026:6750" type="rhsa" title="RHSA-2026:6750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6750.html" id="ALSA-2026:6750" type="self" title="ALSA-2026:6750"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="6.el8_10" epoch="0" arch="aarch64" src="gstreamer1-plugins-bad-free-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">32c984ba3ca097e4499f05783479ed8e5de548dcff95edcc1d514782b698b905</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6918</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 10:17:34"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)
  * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)
  * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)
  * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)
  * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)
  * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)
  * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)
  * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)
  * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)
  * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)
  * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6918" id="RHSA-2026:6918" type="rhsa" title="RHSA-2026:6918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22852" id="CVE-2026-22852" type="cve" title="CVE-2026-22852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22854" id="CVE-2026-22854" type="cve" title="CVE-2026-22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22856" id="CVE-2026-22856" type="cve" title="CVE-2026-22856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23732" id="CVE-2026-23732" type="cve" title="CVE-2026-23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23948" id="CVE-2026-23948" type="cve" title="CVE-2026-23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24491" id="CVE-2026-24491" type="cve" title="CVE-2026-24491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24675" id="CVE-2026-24675" type="cve" title="CVE-2026-24675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24676" id="CVE-2026-24676" type="cve" title="CVE-2026-24676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24679" id="CVE-2026-24679" type="cve" title="CVE-2026-24679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24681" id="CVE-2026-24681" type="cve" title="CVE-2026-24681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24683" id="CVE-2026-24683" type="cve" title="CVE-2026-24683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24684" id="CVE-2026-24684" type="cve" title="CVE-2026-24684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31806" id="CVE-2026-31806" type="cve" title="CVE-2026-31806"/>
      <reference href="https://bugzilla.redhat.com/2429650" id="2429650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429652" id="2429652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429654" id="2429654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430881" id="2430881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438201" id="2438201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438202" id="2438202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438207" id="2438207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438208" id="2438208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438210" id="2438210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438216" id="2438216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438217" id="2438217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438221" id="2438221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447376" id="2447376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6918.html" id="ALSA-2026:6918" type="self" title="ALSA-2026:6918"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="6.el8_10" epoch="2" arch="aarch64" src="freerdp-2.11.7-6.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-6.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1184a542dde21e927f4dec9fc2b01b70a903d457465e313a7f60a379b612b278</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7667</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-14 07:31:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7667" id="RHSA-2026:7667" type="rhsa" title="RHSA-2026:7667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7667.html" id="ALSA-2026:7667" type="self" title="ALSA-2026:7667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libnghttp2-devel" version="1.33.0" release="6.el8_10.2" epoch="0" arch="aarch64" src="nghttp2-1.33.0-6.el8_10.2.src.rpm">
          <filename>libnghttp2-devel-1.33.0-6.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">b9d11b2044708f4b03c81bde2b44c967f7311875dc6498095d0f662b6d7b4a63</sum>
        </package>
        <package name="nghttp2" version="1.33.0" release="6.el8_10.2" epoch="0" arch="aarch64" src="nghttp2-1.33.0-6.el8_10.2.src.rpm">
          <filename>nghttp2-1.33.0-6.el8_10.2.aarch64.rpm</filename>
          <sum type="sha256">ff0dfcc148cbecf3b65dae19ba58878b781279a3992a16406851b8872f034269</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7677</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 07:47:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)
  * fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)
  * fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)
  * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7677" id="RHSA-2026:7677" type="rhsa" title="RHSA-2026:7677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15269" id="CVE-2025-15269" type="cve" title="CVE-2025-15269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15270" id="CVE-2025-15270" type="cve" title="CVE-2025-15270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15275" id="CVE-2025-15275" type="cve" title="CVE-2025-15275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15279" id="CVE-2025-15279" type="cve" title="CVE-2025-15279"/>
      <reference href="https://bugzilla.redhat.com/2426421" id="2426421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426423" id="2426423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426429" id="2426429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426434" id="2426434" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7677.html" id="ALSA-2026:7677" type="self" title="ALSA-2026:7677"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="fontforge" version="20200314" release="7.el8_10" epoch="0" arch="aarch64" src="fontforge-20200314-7.el8_10.src.rpm">
          <filename>fontforge-20200314-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">52f1cd344e7a775a9dd5029f7ac90a594789a4c4cfad962789cdaf15b67ff9d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8155</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 07:11:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8155" id="RHSA-2026:8155" type="rhsa" title="RHSA-2026:8155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8155.html" id="ALSA-2026:8155" type="self" title="ALSA-2026:8155"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="aarch64" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.5.aarch64.rpm</filename>
          <sum type="sha256">07da15aa8659aee891ee972e873b9ffa7ebf89b921743cd7eb08655caeae40aa</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.5.noarch.rpm</filename>
          <sum type="sha256">bb4e5e4e4888f51e6d80dbcff746cda4b667b85bd5aa8d057d44fee8cb55060a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8468</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:45:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDK_VERSION and .NET Runtime RUNTIME_VERSION.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8468" id="RHSA-2026:8468" type="rhsa" title="RHSA-2026:8468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8468.html" id="ALSA-2026:8468" type="self" title="ALSA-2026:8468"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.126" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">3dfa747858ca6d6b96ebd19296032e89a6dd492ed3bc7472121af2f368f5ce5b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8473</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:43:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8473" id="RHSA-2026:8473" type="rhsa" title="RHSA-2026:8473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8473.html" id="ALSA-2026:8473" type="self" title="ALSA-2026:8473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.106" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">ee2c4c22db5e00c324d160892e17bbdc6ec7dc5ec4e0b5b3d27070ace21fb777</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8475</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:40:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8475" id="RHSA-2026:8475" type="rhsa" title="RHSA-2026:8475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8475.html" id="ALSA-2026:8475" type="self" title="ALSA-2026:8475"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.116" release="1.el8_10" epoch="0" arch="aarch64" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">4c35aa6c7f4a2d09bec2e0b35845f87e2ac0aee814c6dbeff59c279ec8c03ce7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8534</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:36:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
  * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8534" id="RHSA-2026:8534" type="rhsa" title="RHSA-2026:8534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4424" id="CVE-2026-4424" type="cve" title="CVE-2026-4424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5121" id="CVE-2026-5121" type="cve" title="CVE-2026-5121"/>
      <reference href="https://bugzilla.redhat.com/2449006" id="2449006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452945" id="2452945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8534.html" id="ALSA-2026:8534" type="self" title="ALSA-2026:8534"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="libarchive-devel" version="3.3.3" release="7.el8_10" epoch="0" arch="aarch64" src="libarchive-3.3.3-7.el8_10.src.rpm">
          <filename>libarchive-devel-3.3.3-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">075eb379e94b802cad46301adfe69d79b10af8008f8826d872ac81591100f9f0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8861</id>
    <title>Important: giflib security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:36:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8861" id="RHSA-2026:8861" type="rhsa" title="RHSA-2026:8861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8861.html" id="ALSA-2026:8861" type="self" title="ALSA-2026:8861"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="giflib-devel" version="5.1.4" release="4.el8_10" epoch="0" arch="aarch64" src="giflib-5.1.4-4.el8_10.src.rpm">
          <filename>giflib-devel-5.1.4-4.el8_10.aarch64.rpm</filename>
          <sum type="sha256">c9404f302e42366ac2ede11bb9ec03c3c25f6b7d06bc8f3271f9e5a8fd2b9aa4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8863</id>
    <title>Important: OpenEXR security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:37:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>OpenEXR security update</summary>
    <description>OpenEXR is a high dynamic-range (HDR) image file format developed by Industrial Light &amp; Magic for use in computer imaging applications. This package contains libraries and sample applications for handling the format.   

Security Fix(es):  

  * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8863" id="RHSA-2026:8863" type="rhsa" title="RHSA-2026:8863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27622" id="CVE-2026-27622" type="cve" title="CVE-2026-27622"/>
      <reference href="https://bugzilla.redhat.com/2444251" id="2444251" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8863.html" id="ALSA-2026:8863" type="self" title="ALSA-2026:8863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="OpenEXR-devel" version="2.2.0" release="12.el8_10.1" epoch="0" arch="aarch64" src="OpenEXR-2.2.0-12.el8_10.1.src.rpm">
          <filename>OpenEXR-devel-2.2.0-12.el8_10.1.aarch64.rpm</filename>
          <sum type="sha256">6ae905c27aeb2eed469f54a4835f4c1824d4487d72720791f2e4c80f5c7cebb4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8945</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 12:43:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8945" id="RHSA-2026:8945" type="rhsa" title="RHSA-2026:8945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33983" id="CVE-2026-33983" type="cve" title="CVE-2026-33983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33984" id="CVE-2026-33984" type="cve" title="CVE-2026-33984"/>
      <reference href="https://bugzilla.redhat.com/2453219" id="2453219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453220" id="2453220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8945.html" id="ALSA-2026:8945" type="self" title="ALSA-2026:8945"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="7.el8_10" epoch="2" arch="aarch64" src="freerdp-2.11.7-7.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-7.el8_10.aarch64.rpm</filename>
          <sum type="sha256">8588cb9a6a3d0a7400a43e1ce1246d099f27ae05beb886fade92f12e418859a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9131</id>
    <title>Important: kernel security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-21 08:45:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
  * kernel: ALSA: aloop: Fix racy access at PCM trigger (CVE-2026-23191)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9131" id="RHSA-2026:9131" type="rhsa" title="RHSA-2026:9131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-68741" id="CVE-2025-68741" type="cve" title="CVE-2025-68741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23191" id="CVE-2026-23191" type="cve" title="CVE-2026-23191"/>
      <reference href="https://bugzilla.redhat.com/2425046" id="2425046" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2439947" id="2439947" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9131.html" id="ALSA-2026:9131" type="self" title="ALSA-2026:9131"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.120.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.120.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.120.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">5bf838a00dcc386a5b22ae2fa7f6d8447c6e51036b8253d08a1a5207ce70a1ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9683</id>
    <title>Important: java-1.8.0-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:32:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-1.8.0-openjdk security update</summary>
    <description>The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9683" id="RHSA-2026:9683" type="rhsa" title="RHSA-2026:9683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9683.html" id="ALSA-2026:9683" type="self" title="ALSA-2026:9683"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-1.8.0-openjdk-src-slowdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-slowdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0bd39fa58640f7306265c4334c775344ac4dbcf331bd74a5319d3658ee68d978</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-fastdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-fastdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0fc77f2c9335b69849081660581e6b3c5b9e4baf08560df547a9903243eb6925</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-slowdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-slowdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">29174f1e9ddadfb2ef879eae7b93272068128058bd4b87afc93df64b4def14ab</sum>
        </package>
        <package name="java-1.8.0-openjdk-fastdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-fastdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4f6025b4007d8185e72546b5f4bb1f68e8957fc9d05d138132f40e125ba5b661</sum>
        </package>
        <package name="java-1.8.0-openjdk-slowdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-slowdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">5bb427a2f04486b0318d3ce97b26970af6dd84a38412b1d62b7deb63bde1924d</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-slowdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">75c41a92599c394e3299b5ed0e2f5fedec726599f4adbd87895d7994281d234d</sum>
        </package>
        <package name="java-1.8.0-openjdk-demo-fastdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-demo-fastdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">85b5de96037ae27e2ac8121d6f9603c8887035d24f4d84bfdbb312657fb20f9d</sum>
        </package>
        <package name="java-1.8.0-openjdk-headless-slowdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-headless-slowdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">865e45e65062d492f4a671ccf1bc52e396b9e2b96021c324bf102dbb774158e1</sum>
        </package>
        <package name="java-1.8.0-openjdk-accessibility-fastdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">dbd7d4efc4638bfcce17231d51bb4c6b65095d7d3df2f1be14400080d6640d57</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-fastdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-fastdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e1458fc419a039547eb59bd3e66343eaa95314337f7b929428937fcbaf3d0bf6</sum>
        </package>
        <package name="java-1.8.0-openjdk-src-fastdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-src-fastdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">f95978c17c046dca99d27a1b6cf96eabcda4d01c5f2bd3b57c26dc3cba6cbf1a</sum>
        </package>
        <package name="java-1.8.0-openjdk-devel-slowdebug" version="1.8.0.492.b09" release="1.el8" epoch="1" arch="aarch64" src="java-1.8.0-openjdk-1.8.0.492.b09-1.el8.src.rpm">
          <filename>java-1.8.0-openjdk-devel-slowdebug-1.8.0.492.b09-1.el8.aarch64.rpm</filename>
          <sum type="sha256">ff4fceee09ab5e13a85e207c212b5df96d0f58e3d85a8e8367c3c5af8153aa45</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9686</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-28 13:20:41"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9686" id="RHSA-2026:9686" type="rhsa" title="RHSA-2026:9686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9686.html" id="ALSA-2026:9686" type="self" title="ALSA-2026:9686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-jmods-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">02dcf7e38994104dcf26977ba765e3644e1b23aa34cc981cb30670958e588105</sum>
        </package>
        <package name="java-17-openjdk-static-libs-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">13ccb7af56a40a0f6c08690a948d67c4cf78e472a4d0481bce2ffd59fd16e1aa</sum>
        </package>
        <package name="java-17-openjdk-devel-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2438e370e5d5b52647758f6bed4cdca2755a9d8035614151b24936040b19735e</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">2b656510a9d4e299102d971fbe1c4354747d81f490b948c4a7b6d0eeee29ee71</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">350d1c5b3312422d1c915050623027836884fd3bf4ddb3dd01e4b35bc7ef76b9</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">38f2b7cf242ce9e79d90dd76111a817b8f7697ed799a50746cceb020cab53035</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">6a68b44e727bf80f37ddedb09169db2ee9ce009b9e454933a23a8b22c7d5db16</sum>
        </package>
        <package name="java-17-openjdk-headless-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">79fbf353f30675ed1f3b7daf25532d121fbdd32e679ef2300ee810f028e84386</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">7d79da98544f6a927e19190abf3b16ee313d7ef5fd39ae43fb819b0d8dcb5564</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">9ca3b74212eab27d3328474255d7fc2a0c4f5101086449baef18e7897a73b9a8</sum>
        </package>
        <package name="java-17-openjdk-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">a236f41b8b38a10b00c1f23d675c3b02e98b7cd502d541362fa3e3697a3aa030</sum>
        </package>
        <package name="java-17-openjdk-src-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c47d1218f8678b8c4860626dcea45c53e1ec1ccce19a5264551527d9784b0a9b</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">db64dd0d7fdb2910fbbc07b9accd566d6f7b8358ac39e3b2d3e6987f8501b4ea</sum>
        </package>
        <package name="java-17-openjdk-demo-fastdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-fastdebug-17.0.19.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e8cfd33ebe2ccd4e7035b0db602f1b5f0ceae216a75b346fd687c6079710a78b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9689</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:26:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


Bug Fix(es):  

  * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9689" id="RHSA-2026:9689" type="rhsa" title="RHSA-2026:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9689.html" id="ALSA-2026:9689" type="self" title="ALSA-2026:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">0de21cfd39e5fc6f0e47c0e3b49931522e1b7d5671bc8e4ffcfd6a1456d02de2</sum>
        </package>
        <package name="java-21-openjdk-devel-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">35839bc20a32ae8178c9d26fed74d277786300516938db22c30261803405322e</sum>
        </package>
        <package name="java-21-openjdk-static-libs-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">444340909d02929bfe48231df268e6aeaabf6e1d87ff5ecb666cad3ec5bd3e1e</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">4894dc6cc957f0c8622a9ed5f8dd88f21ea280a19982f16e0432915006bc54a1</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">73dc5a0cf6e9ab311ddb0cf00c14556cc8ee924f23c3b7daf2328dd58e04b2d0</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">74f70d8f4f4a6fa31a01dd8cddb002cc6e603469b2c5cff6c19432d25228e66f</sum>
        </package>
        <package name="java-21-openjdk-jmods-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">784aa9d4ce91cd1b596da9dad950eaaadaafa1d66d617cc2424ab8b0fc6bdb0f</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">8bf150f957a60aae8412d9ef76dba8057c8b48cd09f5703f0b6d2a554c91a0b6</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">bd9702a85b93f4a409043f1ea1dbb0671d6322e4e8059b0fd21f05419d2f5109</sum>
        </package>
        <package name="java-21-openjdk-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">c339f9ac1efc16579d33f3d6834d71b4f1a877c8bdf6035990790f11e44ec3c1</sum>
        </package>
        <package name="java-21-openjdk-src-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">cbd9e8d226b0c9d5b29ff0ee0581f1825f2f5597aae50078b40d276bc9b0366f</sum>
        </package>
        <package name="java-21-openjdk-headless-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">cd7954ddf606ce3f299ed6892b0b2f2c462b15874be418488f8a59fe80d34395</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e470613eb32f5c1df144b252d256324818005b9762011db56fded07f819796a1</sum>
        </package>
        <package name="java-21-openjdk-demo-fastdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="aarch64" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-fastdebug-21.0.11.0.10-1.el8.aarch64.rpm</filename>
          <sum type="sha256">e4af250cc7d0f7b20434d08cfb60b2610836b70bc51021d5173f2d74adb4727b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:A001</id>
    <title>Important: kernel security update</title>
    <issued date="2026-05-01 00:00:00"/>
    <updated date="2026-05-01 18:59:29"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>kernel security update</summary>
    <description>The kernel packages contain the Linux kernel, the core of any Linux operating system.  

Security Fix(es):  

  * kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31431" id="CVE-2026-31431" type="cve" title="CVE-2026-31431"/>
      <reference href="https://bugzilla.redhat.com/show_bug.cgi?id=2460538" id="show_bug.cgi?id=2460538" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-A001.html" id="ALSA-2026:A001" type="self" title="ALSA-2026:A001"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-aarch64-powertools-rpms__8_10_default">
        <name>almalinux-8-for-aarch64-powertools-rpms__8_10_default</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.121.1.el8_10" epoch="0" arch="aarch64" src="kernel-4.18.0-553.121.1.el8_10.src.rpm">
          <filename>kernel-tools-libs-devel-4.18.0-553.121.1.el8_10.aarch64.rpm</filename>
          <sum type="sha256">1593b5e568d43a0801ce669efcca0f121ac4a82def02c348951b3315feba460c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>