<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:4991</id>
    <title>Important: xz security update</title>
    <issued date="2022-06-13 00:00:00"/>
    <updated date="2023-03-07 17:08:42"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xz security update</summary>
    <description>XZ Utils is an integrated collection of user-space file compression utilities based on the Lempel-Ziv-Markov chain algorithm (LZMA), which performs lossless data compression. The algorithm provides a high compression ratio while keeping the decompression time short.
Security Fix(es):
* gzip: arbitrary-file-write vulnerability (CVE-2022-1271)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:4991" id="RHSA-2022:4991" type="rhsa" title="RHSA-2022:4991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1271" id="CVE-2022-1271" type="cve" title="CVE-2022-1271"/>
      <reference href="https://bugzilla.redhat.com/2073310" id="2073310" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-4991.html" id="ALSA-2022:4991" type="self" title="ALSA-2022:4991"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="xz-lzma-compat" version="5.2.4" release="4.el8_6" epoch="0" arch="s390x" src="xz-5.2.4-4.el8_6.src.rpm">
          <filename>xz-lzma-compat-5.2.4-4.el8_6.s390x.rpm</filename>
          <sum type="sha256">969a0d589c6855b7f4da1a9ad40efbfd6f5480e0390bf50ae77ee47adf404f20</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6539</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-09-15 00:00:00"/>
    <updated date="2022-10-14 12:22:58"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.

Security Fix(es):

* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6539" id="RHSA-2022:6539" type="rhsa" title="RHSA-2022:6539"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38013" id="CVE-2022-38013" type="cve" title="CVE-2022-38013"/>
      <reference href="https://bugzilla.redhat.com/2125124" id="2125124" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6539.html" id="ALSA-2022:6539" type="self" title="ALSA-2022:6539"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.109" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.109-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.109-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">7d21bb620d8bc71d318459d18ea89dd85e37e10ed65e8a30f93a94e9a0cb688f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6781</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2022-10-04 00:00:00"/>
    <updated date="2022-10-14 16:12:12"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)
* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)
* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6781" id="RHSA-2022:6781" type="rhsa" title="RHSA-2022:6781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3080" id="CVE-2022-3080" type="cve" title="CVE-2022-3080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38177" id="CVE-2022-38177" type="cve" title="CVE-2022-38177"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38178" id="CVE-2022-38178" type="cve" title="CVE-2022-38178"/>
      <reference href="https://bugzilla.redhat.com/2128600" id="2128600" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128601" id="2128601" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2128602" id="2128602" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6781.html" id="ALSA-2022:6781" type="self" title="ALSA-2022:6781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="bind9.16-doc" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.7.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">4ae6adb80ef0cf16255901a7899a08619e8c7296aad7c35a3d5e41d6de74a469</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.7.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">c3165bf50ccec053c197cb8dd1b684e626e1c5216bdb827d27117d0bc76b99f5</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.7.el8_6.1.s390x.rpm</filename>
          <sum type="sha256">c335afeddcbcd5e0a9ddf5da93ace91c5db8911ca4cd525280a79b4541774c62</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.7.el8_6.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.7.el8_6.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.7.el8_6.1.noarch.rpm</filename>
          <sum type="sha256">f28397c47c0da1d03984565ecf626418ec36202ba7ab0595d7d0f8a80ce50757</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:6911</id>
    <title>Moderate: .NET 6.0 security and bugfix update</title>
    <issued date="2022-10-12 00:00:00"/>
    <updated date="2022-10-19 07:59:35"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security and bugfix update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  6.0.110 and .NET Runtime 6.0.10.

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:6911" id="RHSA-2022:6911" type="rhsa" title="RHSA-2022:6911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-6911.html" id="ALSA-2022:6911" type="self" title="ALSA-2022:6911"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.110" release="1.el8_6" epoch="0" arch="s390x" src="dotnet6.0-6.0.110-1.el8_6.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.110-1.el8_6.s390x.rpm</filename>
          <sum type="sha256">f997a1b893fa9e428908c8d4266fc550468db267883bc071b038a16bc46f3532</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7000</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 17.0.5) [almalinux-8] (BZ#2132503)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7000" id="RHSA-2022:7000" type="rhsa" title="RHSA-2022:7000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7000.html" id="ALSA-2022:7000" type="self" title="ALSA-2022:7000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">2c1650c6f0ebd84d8f61bf50f35ee68420f734a3b339b67a231e2ed7cd79d0c6</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">393c5426f54cc5324fe9f28d659c75f24ac4d0c2b2f6054b61529f2f3b2a0ada</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">7098ab1b8bf3ea6f785975b729fa6161638a68530ce427093c0d5990b9b90d2c</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">7dcc0ad185d0623f512ede6b9ef4f0f2c2286b40b4ff65794ac7b9da3f24142d</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">8581887afa6677e92914e248ffa76fbc15b1fe6259e03f623d190ecb4e668deb</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">b6cfbe57c6116ccd26a81be7768cd8f3a7570ab3fae4f17a5d8de78ef9fe4eb7</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.5.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-17-openjdk-17.0.5.0.8-2.el8_6.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.5.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">da2a3cbc89cf75cfb6af9d41b17aa3a002953156106b0d8f516907dda4cec96e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7012</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2022-10-19 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2022-10, 11.0.17) [almalinux-8] (BZ#2131863)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7012" id="RHSA-2022:7012" type="rhsa" title="RHSA-2022:7012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21618" id="CVE-2022-21618" type="cve" title="CVE-2022-21618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21619" id="CVE-2022-21619" type="cve" title="CVE-2022-21619"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21624" id="CVE-2022-21624" type="cve" title="CVE-2022-21624"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21626" id="CVE-2022-21626" type="cve" title="CVE-2022-21626"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-21628" id="CVE-2022-21628" type="cve" title="CVE-2022-21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39399" id="CVE-2022-39399" type="cve" title="CVE-2022-39399"/>
      <reference href="https://bugzilla.redhat.com/2133745" id="2133745" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133753" id="2133753" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133765" id="2133765" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133769" id="2133769" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133776" id="2133776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2133817" id="2133817" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7012.html" id="ALSA-2022:7012" type="self" title="ALSA-2022:7012"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">47d65228fade08052c6c09edb7f77173ae76953b6b7b979775a239a47f5f2906</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">728a0f45670b9667191f296460276af9698fa8f39304a83dba2b14aa221bab08</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">740045fcc618be07f0818d33a9691b0becf6f7142252d76d3bfbd9a4fcd0a063</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">795fbe19a9713b2b092ee845e0df1ea44a0424badd9fa2d6e0ce7ba2894180d8</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">a99095bf5f3f8b69e70bf2c9fd503a932b14a977ea07d4a321ade8f10a0ed7a2</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">e5895f8ed1d94eccae27055bd2817acff1a074e1ded72f8a4c3958755b92c8eb</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.17.0.8" release="2.el8_6" epoch="1" arch="s390x" src="java-11-openjdk-11.0.17.0.8-2.el8_6.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.17.0.8-2.el8_6.s390x.rpm</filename>
          <sum type="sha256">fd6172980165a10c48688b90e7a136f7a08006a6223947e57e7c9a8ae87d93ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7089</id>
    <title>Important: libksba security update</title>
    <issued date="2022-10-24 00:00:00"/>
    <updated date="2022-10-26 12:00:01"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7089" id="RHSA-2022:7089" type="rhsa" title="RHSA-2022:7089"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3515" id="CVE-2022-3515" type="cve" title="CVE-2022-3515"/>
      <reference href="https://bugzilla.redhat.com/2135610" id="2135610" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7089.html" id="ALSA-2022:7089" type="self" title="ALSA-2022:7089"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="libksba-devel" version="1.3.5" release="8.el8_6" epoch="0" arch="s390x" src="libksba-1.3.5-8.el8_6.src.rpm">
          <filename>libksba-devel-1.3.5-8.el8_6.s390x.rpm</filename>
          <sum type="sha256">f2728e4e541c2f78d9d991b3e8133a6654273c83a67736b97790e32a43d33130</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7106</id>
    <title>Moderate: zlib security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 12:13:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zlib security update</summary>
    <description>The zlib packages provide a general-purpose lossless data compression library that is used by many different programs.

Security Fix(es):

* zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field (CVE-2022-37434)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7106" id="RHSA-2022:7106" type="rhsa" title="RHSA-2022:7106"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-37434" id="CVE-2022-37434" type="cve" title="CVE-2022-37434"/>
      <reference href="https://bugzilla.redhat.com/2116639" id="2116639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7106.html" id="ALSA-2022:7106" type="self" title="ALSA-2022:7106"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="zlib-static" version="1.2.11" release="19.el8_6" epoch="0" arch="s390x" src="zlib-1.2.11-19.el8_6.src.rpm">
          <filename>zlib-static-1.2.11-19.el8_6.s390x.rpm</filename>
          <sum type="sha256">c80b8467260948c92091d3fa618acd58ef2016e43c16430652a986c15fc8bbe5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7111</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-27 09:05:30"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: server memory information leak via SMB1 (CVE-2022-32742)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* python3-samba requires samba and that is a bug (BZ#2126041)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7111" id="RHSA-2022:7111" type="rhsa" title="RHSA-2022:7111"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32742" id="CVE-2022-32742" type="cve" title="CVE-2022-32742"/>
      <reference href="https://bugzilla.redhat.com/2108196" id="2108196" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7111.html" id="ALSA-2022:7111" type="self" title="ALSA-2022:7111"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="libwbclient-devel" version="4.15.5" release="10.el8_6" epoch="0" arch="s390x" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>libwbclient-devel-4.15.5-10.el8_6.s390x.rpm</filename>
          <sum type="sha256">7bcfbae4bca1095a5ece93f97041ee4da0467c3cf8c6ae9e08bbac38d9cc5a85</sum>
        </package>
        <package name="samba-devel" version="4.15.5" release="10.el8_6" epoch="0" arch="s390x" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>samba-devel-4.15.5-10.el8_6.s390x.rpm</filename>
          <sum type="sha256">973a92a13017b4ba154a1ba63154041637c56fa51ca05a2e141d03fc4af78dd3</sum>
        </package>
        <package name="libsmbclient-devel" version="4.15.5" release="10.el8_6" epoch="0" arch="s390x" src="samba-4.15.5-10.el8_6.src.rpm">
          <filename>libsmbclient-devel-4.15.5-10.el8_6.s390x.rpm</filename>
          <sum type="sha256">f7480b839fe4c1b7a873ff19f57f2fb724b290e5ce775df4731dc6478413bfa7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7192</id>
    <title>Important: device-mapper-multipath security update</title>
    <issued date="2022-10-25 00:00:00"/>
    <updated date="2022-10-26 06:24:14"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>device-mapper-multipath security update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7192" id="RHSA-2022:7192" type="rhsa" title="RHSA-2022:7192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41974" id="CVE-2022-41974" type="cve" title="CVE-2022-41974"/>
      <reference href="https://bugzilla.redhat.com/2133988" id="2133988" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7192.html" id="ALSA-2022:7192" type="self" title="ALSA-2022:7192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.4" release="22.el8_6.2" epoch="0" arch="s390x" src="device-mapper-multipath-0.8.4-22.el8_6.2.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.4-22.el8_6.2.s390x.rpm</filename>
          <sum type="sha256">d86c41c023d4331a9920fade5c5623633f8ce690867dccbaa5ad65623fff13d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7464</id>
    <title>Moderate: protobuf security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:30:52"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>protobuf security update</summary>
    <description>The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7464" id="RHSA-2022:7464" type="rhsa" title="RHSA-2022:7464"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-22570" id="CVE-2021-22570" type="cve" title="CVE-2021-22570"/>
      <reference href="https://bugzilla.redhat.com/2049429" id="2049429" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7464.html" id="ALSA-2022:7464" type="self" title="ALSA-2022:7464"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="protobuf-lite-devel" version="3.5.0" release="15.el8" epoch="0" arch="s390x" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-lite-devel-3.5.0-15.el8.s390x.rpm</filename>
          <sum type="sha256">92893a6c599dbd983c2e998bbe98d2a52f7c9ec455d575b7232c56f056c09153</sum>
        </package>
        <package name="protobuf-devel" version="3.5.0" release="15.el8" epoch="0" arch="s390x" src="protobuf-3.5.0-15.el8.src.rpm">
          <filename>protobuf-devel-3.5.0-15.el8.s390x.rpm</filename>
          <sum type="sha256">df989d144122578f257bcd7615fbb074d6a60d0a41d2b6dc172cc6c9f02aee98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7482</id>
    <title>Moderate: qt5 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 02:11:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5 security, bug fix, and enhancement update</summary>
    <description>The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377)

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7482" id="RHSA-2022:7482" type="rhsa" title="RHSA-2022:7482"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-25255" id="CVE-2022-25255" type="cve" title="CVE-2022-25255"/>
      <reference href="https://bugzilla.redhat.com/2055505" id="2055505" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7482.html" id="ALSA-2022:7482" type="self" title="ALSA-2022:7482"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="qt5-devel" version="5.15.3" release="1.el8" epoch="0" arch="noarch" src="qt5-5.15.3-1.el8.src.rpm">
          <filename>qt5-devel-5.15.3-1.el8.noarch.rpm</filename>
          <sum type="sha256">e2529c70aaac1f516304f2c9f5f4f55d20b2aacb24eb513aa2c65655122f5909</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7524</id>
    <title>Moderate: yajl security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:50:36"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C and a small validating JSON generator.

Security Fix(es):

* yajl: heap-based buffer overflow when handling large inputs due to an integer overflow (CVE-2022-24795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7524" id="RHSA-2022:7524" type="rhsa" title="RHSA-2022:7524"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-24795" id="CVE-2022-24795" type="cve" title="CVE-2022-24795"/>
      <reference href="https://bugzilla.redhat.com/2072912" id="2072912" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7524.html" id="ALSA-2022:7524" type="self" title="ALSA-2022:7524"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="yajl-devel" version="2.1.0" release="11.el8" epoch="0" arch="s390x" src="yajl-2.1.0-11.el8.src.rpm">
          <filename>yajl-devel-2.1.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">b3a79744a7702161cdb657b4ec4adadd50f7e3f50cf6d28b887f8a11c2e88435</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7558</id>
    <title>Low: wavpack security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:29:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>wavpack security update</summary>
    <description>WavPack is a completely open audio compression format providing lossless, high-quality lossy and a unique hybrid compression mode. 

Security Fix(es):

* wavpack: Heap out-of-bounds read in WavpackPackSamples() (CVE-2021-44269)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7558" id="RHSA-2022:7558" type="rhsa" title="RHSA-2022:7558"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-44269" id="CVE-2021-44269" type="cve" title="CVE-2021-44269"/>
      <reference href="https://bugzilla.redhat.com/2064457" id="2064457" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7558.html" id="ALSA-2022:7558" type="self" title="ALSA-2022:7558"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="wavpack-devel" version="5.1.0" release="16.el8" epoch="0" arch="s390x" src="wavpack-5.1.0-16.el8.src.rpm">
          <filename>wavpack-devel-5.1.0-16.el8.s390x.rpm</filename>
          <sum type="sha256">ebbfb504c44d9420760f8f22edbf89fe78428cc6194b3c7f94605e9e947bf4ae</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7583</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:19:54"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Xwayland is an X server for running X clients under Wayland.

Security Fix(es):

* xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access (CVE-2022-2319)
* xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension (CVE-2022-2320)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7583" id="RHSA-2022:7583" type="rhsa" title="RHSA-2022:7583"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2319" id="CVE-2022-2319" type="cve" title="CVE-2022-2319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2320" id="CVE-2022-2320" type="cve" title="CVE-2022-2320"/>
      <reference href="https://bugzilla.redhat.com/2106671" id="2106671" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2106683" id="2106683" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7583.html" id="ALSA-2022:7583" type="self" title="ALSA-2022:7583"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="9.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-9.el8.s390x.rpm</filename>
          <sum type="sha256">2a56e57fc82dacad3926d79f4fe489bc5f58ff78662c6add31af8183c677e87c</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="9.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-9.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-9.el8.noarch.rpm</filename>
          <sum type="sha256">fc4b06bade5230542423feab5a4bc7716bf03b72a2645988adc92c870b816338</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7585</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-12 01:13:26"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561)
* libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562)
* libtiff: reachable assertion (CVE-2022-0865)
* libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924)
* libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355)
* libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844)
* libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891)
* tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908)
* tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7585" id="RHSA-2022:7585" type="rhsa" title="RHSA-2022:7585"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0561" id="CVE-2022-0561" type="cve" title="CVE-2022-0561"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0562" id="CVE-2022-0562" type="cve" title="CVE-2022-0562"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0865" id="CVE-2022-0865" type="cve" title="CVE-2022-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0891" id="CVE-2022-0891" type="cve" title="CVE-2022-0891"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0908" id="CVE-2022-0908" type="cve" title="CVE-2022-0908"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0909" id="CVE-2022-0909" type="cve" title="CVE-2022-0909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0924" id="CVE-2022-0924" type="cve" title="CVE-2022-0924"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1355" id="CVE-2022-1355" type="cve" title="CVE-2022-1355"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22844" id="CVE-2022-22844" type="cve" title="CVE-2022-22844"/>
      <reference href="https://bugzilla.redhat.com/2042603" id="2042603" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054494" id="2054494" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2054495" id="2054495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064145" id="2064145" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064146" id="2064146" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064148" id="2064148" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064406" id="2064406" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064411" id="2064411" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2074415" id="2074415" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7585.html" id="ALSA-2022:7585" type="self" title="ALSA-2022:7585"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="libtiff-tools" version="4.0.9" release="23.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-23.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-23.el8.s390x.rpm</filename>
          <sum type="sha256">8391ea7ea01b560518327f247351ee9316c98e738b3f025edd3259862e7bbacb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7592</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 14:01:15"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7592" id="RHSA-2022:7592" type="rhsa" title="RHSA-2022:7592"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2015-20107" id="CVE-2015-20107" type="cve" title="CVE-2015-20107"/>
      <reference href="https://bugzilla.redhat.com/2075390" id="2075390" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7592.html" id="ALSA-2022:7592" type="self" title="ALSA-2022:7592"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <module name="python39" stream="3.9" version="8060020220421104152" context="b9465af8" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-debug" version="3.9.13" release="1.module_el8.7.0+3344+df07b58a" epoch="0" arch="s390x" src="python39-3.9.13-1.module_el8.7.0+3344+df07b58a.src.rpm">
          <filename>python39-debug-3.9.13-1.module_el8.7.0+3344+df07b58a.s390x.rpm</filename>
          <sum type="sha256">2163489e02464508c0b77767056cd5339b126ae0a8966052a349fe067fcbea30</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7594</id>
    <title>Moderate: poppler security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:27:03"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security and bug fix update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7594" id="RHSA-2022:7594" type="rhsa" title="RHSA-2022:7594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-27337" id="CVE-2022-27337" type="cve" title="CVE-2022-27337"/>
      <reference href="https://bugzilla.redhat.com/2087190" id="2087190" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7594.html" id="ALSA-2022:7594" type="self" title="ALSA-2022:7594"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="poppler-glib-devel" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">2a7219f932b15c09a6fc0af7bf7717baa9eea4451b37344380b96e00e379b885</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">3d4595034a73580d067b8ccbbbb9c49c2e2c744a91ef49d1f6c7de722ac25cc1</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">577961cd48a234f131ec9fbea46dad98f8b082da3f945bccef5b45c92fa30c3d</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">91a6b02f2304e05adf458c530267879bc3605591c57e248dd33ccafbb2132e08</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="5.el8" epoch="0" arch="s390x" src="poppler-20.11.0-5.el8.src.rpm">
          <filename>poppler-devel-20.11.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">c8329e80fcee5e5b14c76703c1fb5d0866fe5e8a924479a8c88d564335fc3838</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7623</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 23:00:27"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: Privilege escalation when similar master and non-master passdbs are used (CVE-2022-30550)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7623" id="RHSA-2022:7623" type="rhsa" title="RHSA-2022:7623"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30550" id="CVE-2022-30550" type="cve" title="CVE-2022-30550"/>
      <reference href="https://bugzilla.redhat.com/2105070" id="2105070" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7623.html" id="ALSA-2022:7623" type="self" title="ALSA-2022:7623"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="dovecot-devel" version="2.3.16" release="3.el8" epoch="1" arch="s390x" src="dovecot-2.3.16-3.el8.src.rpm">
          <filename>dovecot-devel-2.3.16-3.el8.s390x.rpm</filename>
          <sum type="sha256">ba207debe89f23abeb467df90960965e9ebe86dbcfedfa5e0b87b825ae660edf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7639</id>
    <title>Moderate: openblas security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:18:46"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>openblas security update</summary>
    <description>OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.

Security Fix(es):

* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7639" id="RHSA-2022:7639" type="rhsa" title="RHSA-2022:7639"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-4048" id="CVE-2021-4048" type="cve" title="CVE-2021-4048"/>
      <reference href="https://bugzilla.redhat.com/2024358" id="2024358" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7639.html" id="ALSA-2022:7639" type="self" title="ALSA-2022:7639"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="openblas-openmp64" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-openmp64-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">04bc7c0b7c89656c71a3c6e2b6f20b18638dcef655f3155a4b3fc8ef7c7d089c</sum>
        </package>
        <package name="openblas-serial64_" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-serial64_-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">1101adf312b141044dca1bc5e825855b8e3a298543cc25730b38dad8786778eb</sum>
        </package>
        <package name="openblas-threads64" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-threads64-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">1323167a50e07078ee97ed00415df8db72ed3cf75b04377a130704e40fe2f06e</sum>
        </package>
        <package name="openblas-openmp" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-openmp-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">3981cb8853558c2a2dae88a6169ca11958da84cd14228355f3785c5fcbabbdc6</sum>
        </package>
        <package name="openblas-static" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-static-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">70c9bac4cb5480f0b12582f723a4dc5721bc4f57922fd7deaaf6a9557df223f0</sum>
        </package>
        <package name="openblas-threads64_" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-threads64_-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">72584ef3af3e2a701c0833c8d49caf3a67a7b3f409ee6612b8471d33da7b73ec</sum>
        </package>
        <package name="openblas-openmp64_" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-openmp64_-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">92756fb84efe7f42501bbf9dc36fe782dbeb5c4b7dae793e2bea1f4c35090e20</sum>
        </package>
        <package name="openblas-serial64" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-serial64-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">92e670f33ee13d986350a6e3a3f957a0f25100027c21496f6ec2a7a5eae8dbc2</sum>
        </package>
        <package name="openblas-Rblas" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-Rblas-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">c4d619e1dbb5e06331aae036df9ffef862994970475291c35256e9c74b241c66</sum>
        </package>
        <package name="openblas-devel" version="0.3.15" release="4.el8" epoch="0" arch="s390x" src="openblas-0.3.15-4.el8.src.rpm">
          <filename>openblas-devel-0.3.15-4.el8.s390x.rpm</filename>
          <sum type="sha256">d0bf571ce2104bc1513e26e24692fad66e9fd88073ac46b91c41a72ee072dc81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7643</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 22:00:53"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)
* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7643" id="RHSA-2022:7643" type="rhsa" title="RHSA-2022:7643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-25220" id="CVE-2021-25220" type="cve" title="CVE-2021-25220"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-0396" id="CVE-2022-0396" type="cve" title="CVE-2022-0396"/>
      <reference href="https://bugzilla.redhat.com/2064512" id="2064512" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2064513" id="2064513" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7643.html" id="ALSA-2022:7643" type="self" title="ALSA-2022:7643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="python3-bind9.16" version="9.16.23" release="0.9.el8.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.9.el8.1.noarch.rpm</filename>
          <sum type="sha256">043237613c36891d481d246202c360a7b5340af3d29246b2fd86f3999c6fc9f9</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.9.el8.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.9.el8.1.s390x.rpm</filename>
          <sum type="sha256">290deae3edc7dc34412a3ec8677a0333aca55cab1fbe3fbc9a7f002a4ef28ee1</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.9.el8.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.9.el8.1.noarch.rpm</filename>
          <sum type="sha256">9addb777361f2160f4569d500c51faf15a005456562b018162de3b4d51d18d77</sum>
        </package>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.9.el8.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.9.el8.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.9.el8.1.s390x.rpm</filename>
          <sum type="sha256">a515c3ccb8a1a7e55cad61a44d8e0cf1906d4119331aee95f583310ef76b31ce</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7645</id>
    <title>Low: openjpeg2 security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:47:41"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openjpeg2 security update</summary>
    <description>OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.

Security Fix(es):

* openjpeg: segmentation fault in opj2_decompress due to uninitialized pointer (CVE-2022-1122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7645" id="RHSA-2022:7645" type="rhsa" title="RHSA-2022:7645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1122" id="CVE-2022-1122" type="cve" title="CVE-2022-1122"/>
      <reference href="https://bugzilla.redhat.com/2067052" id="2067052" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7645.html" id="ALSA-2022:7645" type="self" title="ALSA-2022:7645"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="openjpeg2-devel" version="2.4.0" release="5.el8" epoch="0" arch="s390x" src="openjpeg2-2.4.0-5.el8.src.rpm">
          <filename>openjpeg2-devel-2.4.0-5.el8.s390x.rpm</filename>
          <sum type="sha256">df2f84e806fdcba118ea8d1edecf806d97aa1bc4bee259611ec1c6a482ccd40e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7692</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 21:16:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)
* expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)
* expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)
* expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)
* expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)
* expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)
* expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7692" id="RHSA-2022:7692" type="rhsa" title="RHSA-2022:7692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46143" id="CVE-2021-46143" type="cve" title="CVE-2021-46143"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22822" id="CVE-2022-22822" type="cve" title="CVE-2022-22822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22823" id="CVE-2022-22823" type="cve" title="CVE-2022-22823"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22824" id="CVE-2022-22824" type="cve" title="CVE-2022-22824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22825" id="CVE-2022-22825" type="cve" title="CVE-2022-22825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22826" id="CVE-2022-22826" type="cve" title="CVE-2022-22826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-22827" id="CVE-2022-22827" type="cve" title="CVE-2022-22827"/>
      <reference href="https://bugzilla.redhat.com/2044455" id="2044455" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044457" id="2044457" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044464" id="2044464" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044467" id="2044467" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044479" id="2044479" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044484" id="2044484" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2044488" id="2044488" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7692.html" id="ALSA-2022:7692" type="self" title="ALSA-2022:7692"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="xmlrpc-c-client++" version="1.51.0" release="8.el8" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-8.el8.s390x.rpm</filename>
          <sum type="sha256">0f34af37e2a60d4c5c5ccff4944f8d64a92cd363d6c3868dcfcff8e2eb8b74ca</sum>
        </package>
        <package name="xmlrpc-c-devel" version="1.51.0" release="8.el8" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-8.el8.s390x.rpm</filename>
          <sum type="sha256">11f23f2e48ad996ed5f4790a37a9bdb23640fe31175eb704e11fb78844dab957</sum>
        </package>
        <package name="xmlrpc-c-c++" version="1.51.0" release="8.el8" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-8.el8.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-8.el8.s390x.rpm</filename>
          <sum type="sha256">2fbeff89f81f7267aa7b8327b1d2d29e24d09b64768b8b0ead3a3a4edf7ba273</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7720</id>
    <title>Moderate: e2fsprogs security and bug fix update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 20:04:02"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>e2fsprogs security and bug fix update</summary>
    <description>The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.

Security Fix(es):

* e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7720" id="RHSA-2022:7720" type="rhsa" title="RHSA-2022:7720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1304" id="CVE-2022-1304" type="cve" title="CVE-2022-1304"/>
      <reference href="https://bugzilla.redhat.com/2069726" id="2069726" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7720.html" id="ALSA-2022:7720" type="self" title="ALSA-2022:7720"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="libss-devel" version="1.45.6" release="5.el8" epoch="0" arch="s390x" src="e2fsprogs-1.45.6-5.el8.src.rpm">
          <filename>libss-devel-1.45.6-5.el8.s390x.rpm</filename>
          <sum type="sha256">3ac6f5cb6b10874d77afb97b83cece07a83cd4eae2cac4348371e2ef0522b7d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7730</id>
    <title>Moderate: libldb security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-14 10:54:11"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libldb security, bug fix, and enhancement update</summary>
    <description>The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.

The following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077484)

Security Fix(es):

* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7730" id="RHSA-2022:7730" type="rhsa" title="RHSA-2022:7730"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32746" id="CVE-2022-32746" type="cve" title="CVE-2022-32746"/>
      <reference href="https://bugzilla.redhat.com/2108215" id="2108215" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7730.html" id="ALSA-2022:7730" type="self" title="ALSA-2022:7730"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="python-ldb-devel-common" version="2.5.2" release="2.el8" epoch="0" arch="s390x" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>python-ldb-devel-common-2.5.2-2.el8.s390x.rpm</filename>
          <sum type="sha256">a8e62c9f931c32a6f3014512e37e9a74995feaf716c9dadb45be3f8cd9efacb9</sum>
        </package>
        <package name="python3-ldb-devel" version="2.5.2" release="2.el8" epoch="0" arch="s390x" src="libldb-2.5.2-2.el8.src.rpm">
          <filename>python3-ldb-devel-2.5.2-2.el8.s390x.rpm</filename>
          <sum type="sha256">fe0fc37a6bcbf17f4e2c89f39cb087bdc199896451d2e09d3ba1907a092cf1cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2022:7826</id>
    <title>Moderate: dotnet7.0 security, bug fix, and enhancement update</title>
    <issued date="2022-11-08 00:00:00"/>
    <updated date="2022-11-11 16:57:00"/>
    <rights>Copyright 2022 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134642).

Security Fix(es):

* dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2022:7826" id="RHSA-2022:7826" type="rhsa" title="RHSA-2022:7826"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41032" id="CVE-2022-41032" type="cve" title="CVE-2022-41032"/>
      <reference href="https://bugzilla.redhat.com/2132614" id="2132614" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2022-7826.html" id="ALSA-2022:7826" type="self" title="ALSA-2022:7826"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_6_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_6_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.100" release="0.4.rc2.el8_7" epoch="0" arch="s390x" src="dotnet7.0-7.0.100-0.4.rc2.el8_7.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.100-0.4.rc2.el8_7.s390x.rpm</filename>
          <sum type="sha256">34fee4b62c30b9c03c3ff0149225a19f5cde8662affcc9310127e4e434016352</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0079</id>
    <title>Moderate: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-01-11 00:00:00"/>
    <updated date="2023-01-12 19:42:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.113 and .NET Runtime 6.0.13.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.113). (BZ#2154458)

Security Fix(es):

* dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process (CVE-2023-21538)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0079" id="RHSA-2023:0079" type="rhsa" title="RHSA-2023:0079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21538" id="CVE-2023-21538" type="cve" title="CVE-2023-21538"/>
      <reference href="https://bugzilla.redhat.com/2158342" id="2158342" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0079.html" id="ALSA-2023:0079" type="self" title="ALSA-2023:0079"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.113" release="1.el8_7" epoch="0" arch="s390x" src="dotnet6.0-6.0.113-1.el8_7.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.113-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">6c29b7c2d6c5a08c111a8ecb151d2e749144f8f201689904e16ad94b574aee27</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0095</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 08:49:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)
* libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() (CVE-2022-2869)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)
* libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() (CVE-2022-2868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0095" id="RHSA-2023:0095" type="rhsa" title="RHSA-2023:0095"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2056" id="CVE-2022-2056" type="cve" title="CVE-2022-2056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2057" id="CVE-2022-2057" type="cve" title="CVE-2022-2057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2058" id="CVE-2022-2058" type="cve" title="CVE-2022-2058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2519" id="CVE-2022-2519" type="cve" title="CVE-2022-2519"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2520" id="CVE-2022-2520" type="cve" title="CVE-2022-2520"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2521" id="CVE-2022-2521" type="cve" title="CVE-2022-2521"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2867" id="CVE-2022-2867" type="cve" title="CVE-2022-2867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2868" id="CVE-2022-2868" type="cve" title="CVE-2022-2868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2869" id="CVE-2022-2869" type="cve" title="CVE-2022-2869"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2953" id="CVE-2022-2953" type="cve" title="CVE-2022-2953"/>
      <reference href="https://bugzilla.redhat.com/2103222" id="2103222" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118847" id="2118847" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118863" id="2118863" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2118869" id="2118869" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122789" id="2122789" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122792" id="2122792" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2122799" id="2122799" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134432" id="2134432" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0095.html" id="ALSA-2023:0095" type="self" title="ALSA-2023:0095"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="libtiff-tools" version="4.0.9" release="26.el8_7" epoch="0" arch="s390x" src="libtiff-4.0.9-26.el8_7.src.rpm">
          <filename>libtiff-tools-4.0.9-26.el8_7.s390x.rpm</filename>
          <sum type="sha256">52ad4ca7607541fa509736bf516757e874d192a6fc08f049d830a64ee3ee9af6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0099</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-01-12 00:00:00"/>
    <updated date="2023-01-13 09:35:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read (CVE-2022-4144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted (BZ#2132176)
* VMs hung on vnc_clipboard_send (BZ#2148504)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0099" id="RHSA-2023:0099" type="rhsa" title="RHSA-2023:0099"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4144" id="CVE-2022-4144" type="cve" title="CVE-2022-4144"/>
      <reference href="https://bugzilla.redhat.com/2148506" id="2148506" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0099.html" id="ALSA-2023:0099" type="self" title="ALSA-2023:0099"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="21.module_el8.7.0+3387+571b583b.2" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-21.module_el8.7.0+3387+571b583b.2.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-21.module_el8.7.0+3387+571b583b.2.s390x.rpm</filename>
          <sum type="sha256">55541d420694c9af5b3b3295969a9ea027777964295e9d56a0bdeb9c26007fce</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">a7452ebf16c6deec972dd5d6cd4d510246546479f915452e55af2e9c1ab53d9a</sum>
        </package>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3346+68867adb.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3346+68867adb.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3346+68867adb.alma.s390x.rpm</filename>
          <sum type="sha256">c5d4eb648a92bdee89f628464dec1d2174a5388a5753c8a08cca0bac402313a8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0192</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database.  This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147473)
* Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-8] (BZ#2153010)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0192" id="RHSA-2023:0192" type="rhsa" title="RHSA-2023:0192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0192.html" id="ALSA-2023:0192" type="self" title="ALSA-2023:0192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">547eb42ebb3af831675c34b4cb645b34b32b8898b9ef477316e4568770cbf63d</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">6e4ed2277fe2cf6cfcca28660dc514a2f76f9bba0ec6c5c28de2e06f99f6cfc0</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">787232bb6310049d47d9a953da9da7fe03b3d69b12b3bcc12bc901e23610567e</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">b0140dc5c2ac7f92ee2db56eab874c49a8516c6f9ebd58971205e1de728b7623</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">ed17f4b13f385dc3b4e2abc7fd2a6c76fe77a703cc8414f21038f334b02c0f4e</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">f2f451fb010874ee61fb8b4608778ee0898e83d90632f6ca10a3c226af4e1b22</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.6.0.10" release="3.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.6.0.10-3.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.6.0.10-3.el8_7.s390x.rpm</filename>
          <sum type="sha256">f498b729bf133136408f30183a9155639157b8d0886108ff88ba6289e97257d3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0200</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-01-18 00:00:00"/>
    <updated date="2023-09-15 13:41:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-8] (BZ#2157797)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0200" id="RHSA-2023:0200" type="rhsa" title="RHSA-2023:0200"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21835" id="CVE-2023-21835" type="cve" title="CVE-2023-21835"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21843" id="CVE-2023-21843" type="cve" title="CVE-2023-21843"/>
      <reference href="https://bugzilla.redhat.com/2160421" id="2160421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2160475" id="2160475" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0200.html" id="ALSA-2023:0200" type="self" title="ALSA-2023:0200"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">23ab5152572eb7133df95dd1387c2542fd6d6d90021645ef4b6be705423d7e63</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">41c79f9f223ec1b15e9916f616d58999a5ec8ae08a4392c34bc762f2181b1419</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">b1ebf5c472bba24de8cc2dfcf909f66a66bd05ae740617a657ee52e7440d879f</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">b3e42ec312d73fb989032636523436a501e077f2c0fc3a5289e224414a99036e</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">b93499d0211f73dc4a3a187e8ed33e0cce7b468566d127e3d5d7d532777196d2</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">c88e4a2256edac7b0b1ef08ee3798a3840ae8f7b1046ffa011e3bec665ade499</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.18.0.10" release="2.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.18.0.10-2.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.18.0.10-2.el8_7.s390x.rpm</filename>
          <sum type="sha256">d3f7fe214334acdcb707c893643a87c6508b6d72ddd3aed337cb0de30b022ab7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0625</id>
    <title>Important: libksba security update</title>
    <issued date="2023-02-07 00:00:00"/>
    <updated date="2023-02-09 15:52:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libksba security update</summary>
    <description>KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.

Security Fix(es):

* libksba: integer overflow to code executiona (CVE-2022-47629)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0625" id="RHSA-2023:0625" type="rhsa" title="RHSA-2023:0625"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-47629" id="CVE-2022-47629" type="cve" title="CVE-2022-47629"/>
      <reference href="https://bugzilla.redhat.com/2161571" id="2161571" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0625.html" id="ALSA-2023:0625" type="self" title="ALSA-2023:0625"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="libksba-devel" version="1.3.5" release="9.el8_7" epoch="0" arch="s390x" src="libksba-1.3.5-9.el8_7.src.rpm">
          <filename>libksba-devel-1.3.5-9.el8_7.s390x.rpm</filename>
          <sum type="sha256">ac4ee57969a61ff66ab4ffa15fd455dd12b242ebaa5bce73e37e59b9f969b5ef</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:0838</id>
    <title>Important: samba security update</title>
    <issued date="2023-02-21 00:00:00"/>
    <updated date="2023-02-21 18:23:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:0838" id="RHSA-2023:0838" type="rhsa" title="RHSA-2023:0838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38023" id="CVE-2022-38023" type="cve" title="CVE-2022-38023"/>
      <reference href="https://bugzilla.redhat.com/2154362" id="2154362" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-0838.html" id="ALSA-2023:0838" type="self" title="ALSA-2023:0838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="samba-devel" version="4.16.4" release="4.el8_7" epoch="0" arch="s390x" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>samba-devel-4.16.4-4.el8_7.s390x.rpm</filename>
          <sum type="sha256">275f126f34defc4d04cf7bef4d6675c6e851f4ab69c2069ff5901893bbb1361e</sum>
        </package>
        <package name="libsmbclient-devel" version="4.16.4" release="4.el8_7" epoch="0" arch="s390x" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>libsmbclient-devel-4.16.4-4.el8_7.s390x.rpm</filename>
          <sum type="sha256">8041fdbfaf58c208aa3f4c0bc77ffe54b51465d1c3097108331ed23573cfdccd</sum>
        </package>
        <package name="libwbclient-devel" version="4.16.4" release="4.el8_7" epoch="0" arch="s390x" src="samba-4.16.4-4.el8_7.src.rpm">
          <filename>libwbclient-devel-4.16.4-4.el8_7.s390x.rpm</filename>
          <sum type="sha256">be93796291847b70a9550387412185417965c7e75d14a67006fc38dbf8222275</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1895</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-23 06:33:56"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1895" id="RHSA-2023:1895" type="rhsa" title="RHSA-2023:1895"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1895.html" id="ALSA-2023:1895" type="self" title="ALSA-2023:1895"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">0f1077aa12dc515136c1bd2b542a28f3c76beee317c11bb6fe7bc9a00b25839d</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">12aa2a0544da8be2b1072cb3d46f1e0c7550b99194e6752f1e0675d66ebea6c7</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">3cd757fe76a308cee5c621431b02fbf80cfb77cc8ffdb2a148edfb8d90c4c114</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">694df5397ca09f8d845af294381c2e6b16491c682fe90df3cc0a5fa9a2916946</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">7f902e8aa98db2f1ab495e9d17c0e4ca6c97f6077211e694ae5d2d5d6d3011cf</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">c3adb5cd078423f5f03663569a982055e934ac1a71bcee7a83ea12006b356b89</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.19.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">eb0c8c2bcca87edbc2f6518d79e0c6770fbb2222b75a0ae158972a335c6e00b3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:1898</id>
    <title>Important: java-17-openjdk security and bug fix update</title>
    <issued date="2023-04-20 00:00:00"/>
    <updated date="2023-04-23 06:46:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186835)
* Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186827)
* The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186831)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:1898" id="RHSA-2023:1898" type="rhsa" title="RHSA-2023:1898"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21930" id="CVE-2023-21930" type="cve" title="CVE-2023-21930"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21937" id="CVE-2023-21937" type="cve" title="CVE-2023-21937"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21938" id="CVE-2023-21938" type="cve" title="CVE-2023-21938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21939" id="CVE-2023-21939" type="cve" title="CVE-2023-21939"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21954" id="CVE-2023-21954" type="cve" title="CVE-2023-21954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21967" id="CVE-2023-21967" type="cve" title="CVE-2023-21967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-21968" id="CVE-2023-21968" type="cve" title="CVE-2023-21968"/>
      <reference href="https://bugzilla.redhat.com/2187435" id="2187435" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187441" id="2187441" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187704" id="2187704" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187724" id="2187724" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187758" id="2187758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187790" id="2187790" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2187802" id="2187802" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-1898.html" id="ALSA-2023:1898" type="self" title="ALSA-2023:1898"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_7_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_7_default</name>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">02ddc76c0906177e5ba4ec0e0203b86c0d68910dddc114e89ba1b1c7d371a808</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">1063457717dcad86e3a9f451337285e7218d520bf3bfc8440cc0e7c710d742ce</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">44163936315a598a7613fa60c299b5372232f8f87ce15cf10851e2114a31babc</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">612defef4cd4d234b4748f2723bb475841177878cbe87d604aaff3a4223a19aa</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">8f5d984122e632a5e3474304be1e9219e22a7c005971f8f80007e69ad3711cc4</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">ac878e26ea2cbd658e6c613eaf96449c06d7f6b6c73b68b95020e7dc434979bf</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.7.0.7" release="1.el8_7" epoch="1" arch="s390x" src="java-17-openjdk-17.0.7.0.7-1.el8_7.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.7.0.7-1.el8_7.s390x.rpm</filename>
          <sum type="sha256">eacf7927b4df014a3c1bec66ca4fa8fb97dbb9cf97a8f920fc607a37fa3061b0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2757</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-22 07:57:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790)
* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165)
* ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789)
* tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2757" id="RHSA-2023:2757" type="rhsa" title="RHSA-2023:2757"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-46790" id="CVE-2021-46790" type="cve" title="CVE-2021-46790"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30784" id="CVE-2022-30784" type="cve" title="CVE-2022-30784"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30786" id="CVE-2022-30786" type="cve" title="CVE-2022-30786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30788" id="CVE-2022-30788" type="cve" title="CVE-2022-30788"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-30789" id="CVE-2022-30789" type="cve" title="CVE-2022-30789"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3165" id="CVE-2022-3165" type="cve" title="CVE-2022-3165"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1018" id="CVE-2023-1018" type="cve" title="CVE-2023-1018"/>
      <reference href="https://bugzilla.redhat.com/2093314" id="2093314" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093326" id="2093326" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093340" id="2093340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093348" id="2093348" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2093358" id="2093358" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2129739" id="2129739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2149420" id="2149420" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2757.html" id="ALSA-2023:2757" type="self" title="ALSA-2023:2757"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">a3c4f77de0a76f423377e1acf556433fd99845d9ec3750815d6470f371978b49</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2764</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:58"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python39 (3.9.16).

Security Fix(es):

* python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)
* python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)
* python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2764" id="RHSA-2023:2764" type="rhsa" title="RHSA-2023:2764"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-10735" id="CVE-2020-10735" type="cve" title="CVE-2020-10735"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-28861" id="CVE-2021-28861" type="cve" title="CVE-2021-28861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-45061" id="CVE-2022-45061" type="cve" title="CVE-2022-45061"/>
      <reference href="https://bugzilla.redhat.com/1834423" id="1834423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2120642" id="2120642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2144072" id="2144072" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2764.html" id="ALSA-2023:2764" type="self" title="ALSA-2023:2764"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8060020220421104152" context="b9465af8" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
        <package name="python39-debug" version="3.9.16" release="1.module_el8.8.0+3483+a028a3dd" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3483+a028a3dd.src.rpm">
          <filename>python39-debug-3.9.16-1.module_el8.8.0+3483+a028a3dd.s390x.rpm</filename>
          <sum type="sha256">d33bdb143bc74b72efac04de78831d22946241fde6799b358fb80f630edfbc12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2792</id>
    <title>Moderate: bind9.16 security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:05:41"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bind9.16 security and bug fix update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795)
* bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736)
* bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2792" id="RHSA-2023:2792" type="rhsa" title="RHSA-2023:2792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2795" id="CVE-2022-2795" type="cve" title="CVE-2022-2795"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3094" id="CVE-2022-3094" type="cve" title="CVE-2022-3094"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3736" id="CVE-2022-3736" type="cve" title="CVE-2022-3736"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3924" id="CVE-2022-3924" type="cve" title="CVE-2022-3924"/>
      <reference href="https://bugzilla.redhat.com/2128584" id="2128584" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164032" id="2164032" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164038" id="2164038" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2164039" id="2164039" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2792.html" id="ALSA-2023:2792" type="self" title="ALSA-2023:2792"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="bind9.16-doc" version="9.16.23" release="0.14.el8" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.14.el8.noarch.rpm</filename>
          <sum type="sha256">18b262dd4ad98ad55add7f007f6933cecb05c939e1cb5eacc32df8c37105a609</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.14.el8" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.14.el8.s390x.rpm</filename>
          <sum type="sha256">47162e57fda6e290de25b9b31e468efcfcc3b29142778e6e2fad961234547f90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2806</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:05:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)
* xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)
* xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)
* xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)
* xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)
* xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)
* xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)
* xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)
* xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2806" id="RHSA-2023:2806" type="rhsa" title="RHSA-2023:2806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3550" id="CVE-2022-3550" type="cve" title="CVE-2022-3550"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3551" id="CVE-2022-3551" type="cve" title="CVE-2022-3551"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4283" id="CVE-2022-4283" type="cve" title="CVE-2022-4283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46340" id="CVE-2022-46340" type="cve" title="CVE-2022-46340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46341" id="CVE-2022-46341" type="cve" title="CVE-2022-46341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46342" id="CVE-2022-46342" type="cve" title="CVE-2022-46342"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46343" id="CVE-2022-46343" type="cve" title="CVE-2022-46343"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-46344" id="CVE-2022-46344" type="cve" title="CVE-2022-46344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0494" id="CVE-2023-0494" type="cve" title="CVE-2023-0494"/>
      <reference href="https://bugzilla.redhat.com/2140698" id="2140698" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2140701" id="2140701" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151755" id="2151755" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151756" id="2151756" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151757" id="2151757" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151758" id="2151758" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151760" id="2151760" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2151761" id="2151761" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2165995" id="2165995" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2806.html" id="ALSA-2023:2806" type="self" title="ALSA-2023:2806"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="15.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-15.el8.s390x.rpm</filename>
          <sum type="sha256">3c73719ce739c003b6c4d4f009b44ac1cb249a6ab1b437ccb5b37569cff1cded</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="15.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-15.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-15.el8.noarch.rpm</filename>
          <sum type="sha256">4cc2d36c586f04600d6dd41d34113ed74876f4116b48cdd088b2ff4782e8abc7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2810</id>
    <title>Moderate: poppler security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2810" id="RHSA-2023:2810" type="rhsa" title="RHSA-2023:2810"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-38784" id="CVE-2022-38784" type="cve" title="CVE-2022-38784"/>
      <reference href="https://bugzilla.redhat.com/2124527" id="2124527" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2810.html" id="ALSA-2023:2810" type="self" title="ALSA-2023:2810"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="poppler-cpp-devel" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">2fc3eb32f4d00ebfc5f86173fafba4bd9838b0df4cf9633a41ae981046a9dcda</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">365f8de78aa632bd2154e8ccd6b576e6d1044ddc353fa247e254ae69d52e6d37</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">4fb28d6a86553d9e323f3116fff12341fd1386093c9dd143b041a4675767a863</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-devel-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">91a26b5d6bf911b84ab29be5efa0e6dd997aa590bd7fab78f1d14829854db44a</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="6.el8" epoch="0" arch="s390x" src="poppler-20.11.0-6.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-6.el8.s390x.rpm</filename>
          <sum type="sha256">c7a3567c841731e7bb1fc740e01af8d73b0fc72455c2e3f85f2fe026fed7a5d7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2851</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:02"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: clients using `/parallel` command line switch might read uninitialized data (CVE-2022-39282)
* freerdp: clients using the `/video` command line switch might read uninitialized data (CVE-2022-39283)
* freerdp: out of bounds read in zgfx decoder (CVE-2022-39316)
* freerdp: undefined behaviour in zgfx decoder (CVE-2022-39317)
* freerdp: division by zero in urbdrc channel (CVE-2022-39318)
* freerdp: missing length validation in urbdrc channel (CVE-2022-39319)
* freerdp: heap buffer overflow in urbdrc channel (CVE-2022-39320)
* freerdp: missing path sanitation with `drive` channel (CVE-2022-39347)
* freerdp: missing input length validation in `drive` channel (CVE-2022-41877)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2851" id="RHSA-2023:2851" type="rhsa" title="RHSA-2023:2851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39282" id="CVE-2022-39282" type="cve" title="CVE-2022-39282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39283" id="CVE-2022-39283" type="cve" title="CVE-2022-39283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39316" id="CVE-2022-39316" type="cve" title="CVE-2022-39316"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39317" id="CVE-2022-39317" type="cve" title="CVE-2022-39317"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39318" id="CVE-2022-39318" type="cve" title="CVE-2022-39318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39319" id="CVE-2022-39319" type="cve" title="CVE-2022-39319"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39320" id="CVE-2022-39320" type="cve" title="CVE-2022-39320"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-39347" id="CVE-2022-39347" type="cve" title="CVE-2022-39347"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41877" id="CVE-2022-41877" type="cve" title="CVE-2022-41877"/>
      <reference href="https://bugzilla.redhat.com/2134713" id="2134713" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2134717" id="2134717" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143642" id="2143642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143643" id="2143643" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143644" id="2143644" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143645" id="2143645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143646" id="2143646" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143647" id="2143647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2143648" id="2143648" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2851.html" id="ALSA-2023:2851" type="self" title="ALSA-2023:2851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="freerdp-devel" version="2.2.0" release="10.el8" epoch="2" arch="s390x" src="freerdp-2.2.0-10.el8.src.rpm">
          <filename>freerdp-devel-2.2.0-10.el8.s390x.rpm</filename>
          <sum type="sha256">857853f74e3fc68a2adba2a8e7fdf1425dc3e8af73989eb832afae7369e28cd6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2863</id>
    <title>Moderate: ctags security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ctags security update</summary>
    <description>Ctags is a C programming language indexing and cross-reference tool.

Security Fix(es):

* ctags: arbitrary command execution via a tag file with a crafted filename (CVE-2022-4515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2863" id="RHSA-2023:2863" type="rhsa" title="RHSA-2023:2863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4515" id="CVE-2022-4515" type="cve" title="CVE-2022-4515"/>
      <reference href="https://bugzilla.redhat.com/2153519" id="2153519" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2863.html" id="ALSA-2023:2863" type="self" title="ALSA-2023:2863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="ctags-etags" version="5.8" release="23.el8" epoch="0" arch="s390x" src="ctags-5.8-23.el8.src.rpm">
          <filename>ctags-etags-5.8-23.el8.s390x.rpm</filename>
          <sum type="sha256">68b418222a497306839eb79a71b8cd677975c83bf717afeabb2572ca22c46805</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2883</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:04"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
* libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2883" id="RHSA-2023:2883" type="rhsa" title="RHSA-2023:2883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3627" id="CVE-2022-3627" type="cve" title="CVE-2022-3627"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3970" id="CVE-2022-3970" type="cve" title="CVE-2022-3970"/>
      <reference href="https://bugzilla.redhat.com/2142742" id="2142742" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2148918" id="2148918" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2883.html" id="ALSA-2023:2883" type="self" title="ALSA-2023:2883"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="libtiff-tools" version="4.0.9" release="27.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-27.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-27.el8.s390x.rpm</filename>
          <sum type="sha256">d72d4c78cb989c77e2676096497a61c117ad8f8a376b480ec3d13dacfe314771</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2948</id>
    <title>Moderate: device-mapper-multipath security and bug fix update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:06"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>device-mapper-multipath security and bug fix update</summary>
    <description>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.

Security Fix(es):

* device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack (CVE-2022-41973)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2948" id="RHSA-2023:2948" type="rhsa" title="RHSA-2023:2948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-41973" id="CVE-2022-41973" type="cve" title="CVE-2022-41973"/>
      <reference href="https://bugzilla.redhat.com/2123894" id="2123894" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2948.html" id="ALSA-2023:2948" type="self" title="ALSA-2023:2948"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="device-mapper-multipath-devel" version="0.8.4" release="37.el8" epoch="0" arch="s390x" src="device-mapper-multipath-0.8.4-37.el8.src.rpm">
          <filename>device-mapper-multipath-devel-0.8.4-37.el8.s390x.rpm</filename>
          <sum type="sha256">1bc0c41faad320f6f10fafc298f360097b9f995743f7cd8b54c58eb982544315</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:2987</id>
    <title>Low: samba security, bug fix, and enhancement update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:01:40"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.17.5). (BZ#2132051)

Security Fix(es):

* samba: GnuTLS gnutls_rnd() can fail and give predictable random values (CVE-2022-1615)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:2987" id="RHSA-2023:2987" type="rhsa" title="RHSA-2023:2987"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-1615" id="CVE-2022-1615" type="cve" title="CVE-2022-1615"/>
      <reference href="https://bugzilla.redhat.com/2122649" id="2122649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-2987.html" id="ALSA-2023:2987" type="self" title="ALSA-2023:2987"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="python3-samba-devel" version="4.17.5" release="2.el8" epoch="0" arch="s390x" src="samba-4.17.5-2.el8.src.rpm">
          <filename>python3-samba-devel-4.17.5-2.el8.s390x.rpm</filename>
          <sum type="sha256">5055f6c6f4cd1c0bf6d5686ab087f88ed2aa8610e2e910dc9218c5aba5a5eb96</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="2.el8" epoch="0" arch="s390x" src="samba-4.17.5-2.el8.src.rpm">
          <filename>libnetapi-devel-4.17.5-2.el8.s390x.rpm</filename>
          <sum type="sha256">5ee9a399c40009fbd6220484e41437937675d422a3b009ec9736a7ceac53af63</sum>
        </package>
        <package name="libsmbclient-devel" version="4.17.5" release="2.el8" epoch="0" arch="s390x" src="samba-4.17.5-2.el8.src.rpm">
          <filename>libsmbclient-devel-4.17.5-2.el8.s390x.rpm</filename>
          <sum type="sha256">827f033faba17a235d46b7cb46376b3ebe3efcf99d61e53f3fa2aa8eaf5ac6c7</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="2.el8" epoch="0" arch="s390x" src="samba-4.17.5-2.el8.src.rpm">
          <filename>libwbclient-devel-4.17.5-2.el8.s390x.rpm</filename>
          <sum type="sha256">89430f0a69d7b511d3ded724f2f1ede218a136e0954283da6173d4a460ea84e3</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="2.el8" epoch="0" arch="s390x" src="samba-4.17.5-2.el8.src.rpm">
          <filename>samba-devel-4.17.5-2.el8.s390x.rpm</filename>
          <sum type="sha256">af210997e925c7fd37b6b07b0e09745ee3bdc930cf0c63cf97927588d71a639f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3018</id>
    <title>Low: libarchive security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.

Security Fix(es):

* libarchive: NULL pointer dereference in archive_write.c (CVE-2022-36227)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3018" id="RHSA-2023:3018" type="rhsa" title="RHSA-2023:3018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-36227" id="CVE-2022-36227" type="cve" title="CVE-2022-36227"/>
      <reference href="https://bugzilla.redhat.com/2144972" id="2144972" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3018.html" id="ALSA-2023:3018" type="self" title="ALSA-2023:3018"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="libarchive-devel" version="3.3.3" release="5.el8" epoch="0" arch="s390x" src="libarchive-3.3.3-5.el8.src.rpm">
          <filename>libarchive-devel-3.3.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">aeded8d2596faead1119f1f7e67f4ece710eafca1385c2549f5f5d8031843117</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3067</id>
    <title>Moderate: autotrace security update</title>
    <issued date="2023-05-16 00:00:00"/>
    <updated date="2023-05-19 22:00:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>autotrace security update</summary>
    <description>AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3067" id="RHSA-2023:3067" type="rhsa" title="RHSA-2023:3067"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-32323" id="CVE-2022-32323" type="cve" title="CVE-2022-32323"/>
      <reference href="https://bugzilla.redhat.com/2107471" id="2107471" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3067.html" id="ALSA-2023:3067" type="self" title="ALSA-2023:3067"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="autotrace" version="0.31.1" release="55.el8" epoch="0" arch="s390x" src="autotrace-0.31.1-55.el8.src.rpm">
          <filename>autotrace-0.31.1-55.el8.s390x.rpm</filename>
          <sum type="sha256">c57ca6220e49b2ce3ec4b3975c9b493271d571a322e2910cfc7910e57dbb58ba</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3425</id>
    <title>Important: cups-filters security update</title>
    <issued date="2023-06-05 00:00:00"/>
    <updated date="2023-06-06 06:02:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3425" id="RHSA-2023:3425" type="rhsa" title="RHSA-2023:3425"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24805" id="CVE-2023-24805" type="cve" title="CVE-2023-24805"/>
      <reference href="https://bugzilla.redhat.com/2203051" id="2203051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3425.html" id="ALSA-2023:3425" type="self" title="ALSA-2023:3425"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="cups-filters-devel" version="1.20.0" release="29.el8_8.2" epoch="0" arch="s390x" src="cups-filters-1.20.0-29.el8_8.2.src.rpm">
          <filename>cups-filters-devel-1.20.0-29.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">18eec40ed7829287c10776a46e6a3b0dfafcaff8998f00bd0090e90cedc50655</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3582</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-24 08:08:36"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.118 and .NET Runtime 6.0.18.

The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212378)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3582" id="RHSA-2023:3582" type="rhsa" title="RHSA-2023:3582"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3582.html" id="ALSA-2023:3582" type="self" title="ALSA-2023:3582"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.118" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.118-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.118-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">742bd6ca905120ec9a2d6e3458ac8b418dd150a45568f98d65ca370f2b3f84cc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3593</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-23 14:06:03"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.107 and .NET Runtime 7.0.7.

The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211876)

Security Fix(es):

* dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)
* dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack (CVE-2023-29337)
* dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument (CVE-2023-32032)
* dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption (CVE-2023-33128)
* dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3593" id="RHSA-2023:3593" type="rhsa" title="RHSA-2023:3593"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24936" id="CVE-2023-24936" type="cve" title="CVE-2023-24936"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29331" id="CVE-2023-29331" type="cve" title="CVE-2023-29331"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-29337" id="CVE-2023-29337" type="cve" title="CVE-2023-29337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32032" id="CVE-2023-32032" type="cve" title="CVE-2023-32032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33128" id="CVE-2023-33128" type="cve" title="CVE-2023-33128"/>
      <reference href="https://bugzilla.redhat.com/2192438" id="2192438" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212615" id="2212615" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212617" id="2212617" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212618" id="2212618" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2213703" id="2213703" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3593.html" id="ALSA-2023:3593" type="self" title="ALSA-2023:3593"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.107" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.107-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.107-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">d53b52f9adf362a41761a808e9c43a72fecae041787ab5341dac91ee0c6e3de0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3594</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-06-14 00:00:00"/>
    <updated date="2023-06-22 12:05:07"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3594" id="RHSA-2023:3594" type="rhsa" title="RHSA-2023:3594"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3594.html" id="ALSA-2023:3594" type="self" title="ALSA-2023:3594"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="python3.11-test" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-test-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">b6b613f405ecce810c9f5fc80435005045832eeb627cf57664ca1c638beeec3e</sum>
        </package>
        <package name="python3.11-debug" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">c8140cf059dfe1b0ec714b296c22f82708737d4be2c753988547bf820393abf2</sum>
        </package>
        <package name="python3.11-idle" version="3.11.2" release="2.el8_8.1" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.1.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">f8ecc0f562dd4b1b0200981b614ef2668fa619845fccd3b1d192adfafc811acc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3811</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-30 15:49:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3811" id="RHSA-2023:3811" type="rhsa" title="RHSA-2023:3811"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24329" id="CVE-2023-24329" type="cve" title="CVE-2023-24329"/>
      <reference href="https://bugzilla.redhat.com/2173917" id="2173917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3811.html" id="ALSA-2023:3811" type="self" title="ALSA-2023:3811"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8060020220421104152" context="b9465af8" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-debug" version="3.9.16" release="1.module_el8.8.0+3577+f4afbb0e.1" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.src.rpm">
          <filename>python39-debug-3.9.16-1.module_el8.8.0+3577+f4afbb0e.1.s390x.rpm</filename>
          <sum type="sha256">96942665f42f20f80772c7c16ebcf294b3f2521161ed2cf8842b648d5783ad29</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3822</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-07-15 00:07:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: Memory leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Logs are spammed with ' Domain id=7 is tainted: custom-ga-command' message (BZ#2180030)
* [qemu] snapshot is failing with error libvirt.libvirtError: internal error: QEMU monitor reply exceeds buffer size (10485760 bytes) (BZ#2181575)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3822" id="RHSA-2023:3822" type="rhsa" title="RHSA-2023:3822"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2700" id="CVE-2023-2700" type="cve" title="CVE-2023-2700"/>
      <reference href="https://bugzilla.redhat.com/2203653" id="2203653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3822.html" id="ALSA-2023:3822" type="self" title="ALSA-2023:3822"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="32.module_el8.8.0+3553+bd08596b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-32.module_el8.8.0+3553+bd08596b.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-32.module_el8.8.0+3553+bd08596b.s390x.rpm</filename>
          <sum type="sha256">a3c4f77de0a76f423377e1acf556433fd99845d9ec3750815d6470f371978b49</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:3827</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-06-27 00:00:00"/>
    <updated date="2023-06-29 13:24:42"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:3827" id="RHSA-2023:3827" type="rhsa" title="RHSA-2023:3827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48281" id="CVE-2022-48281" type="cve" title="CVE-2022-48281"/>
      <reference href="https://bugzilla.redhat.com/2163606" id="2163606" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-3827.html" id="ALSA-2023:3827" type="self" title="ALSA-2023:3827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="libtiff-tools" version="4.0.9" release="28.el8_8" epoch="0" arch="s390x" src="libtiff-4.0.9-28.el8_8.src.rpm">
          <filename>libtiff-tools-4.0.9-28.el8_8.s390x.rpm</filename>
          <sum type="sha256">0789089dae051baf675d0daf218944b5dce49b8def01cf0611c42958f9b62a77</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4058</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:09:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet7.0 (SDK 7.0.109, Runtime 7.0.9). (BZ#2219633)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4058" id="RHSA-2023:4058" type="rhsa" title="RHSA-2023:4058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4058.html" id="ALSA-2023:4058" type="self" title="ALSA-2023:4058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.109" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.109-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.109-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">039516208b8fd746bf34bfb6e7ca92b10b700cdd848b93cabe78ac30e64dec17</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4059</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-07-13 00:00:00"/>
    <updated date="2023-07-14 10:31:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

The following packages have been upgraded to a later upstream version: dotnet6.0 (SDK 6.0.120, Runtime 6.0.20). (BZ#2219639)

Security Fix(es):

* dotnet: race condition in Core SignInManager&lt;TUser&gt; PasswordSignInAsync method (CVE-2023-33170)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4059" id="RHSA-2023:4059" type="rhsa" title="RHSA-2023:4059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33170" id="CVE-2023-33170" type="cve" title="CVE-2023-33170"/>
      <reference href="https://bugzilla.redhat.com/2221854" id="2221854" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4059.html" id="ALSA-2023:4059" type="self" title="ALSA-2023:4059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.120" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.120-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.120-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">b7bbc26e9eab218120a992aabefec10aae215007ba88e50269d1aa036215c789</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4100</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2023-07-17 00:00:00"/>
    <updated date="2023-07-18 07:27:23"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4100" id="RHSA-2023:4100" type="rhsa" title="RHSA-2023:4100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2828" id="CVE-2023-2828" type="cve" title="CVE-2023-2828"/>
      <reference href="https://bugzilla.redhat.com/2216227" id="2216227" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4100.html" id="ALSA-2023:4100" type="self" title="ALSA-2023:4100"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">391b4e8fcfb1d1842a972ec582bc4e8318e666c6d6b21b809362781459b18903</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.14.el8_8.1.alma.s390x.rpm</filename>
          <sum type="sha256">3e081c8a1e9537be67b3561414584afbb7e7fa872f584e58a05736847228e051</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8_8.1.alma.noarch.rpm</filename>
          <sum type="sha256">5a9770a9790cafeb0aa3b909d6ec3e61c6900cb4d48478b99b49dab10323d351</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.14.el8_8.1.alma" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.1.alma.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.14.el8_8.1.alma.noarch.rpm</filename>
          <sum type="sha256">e7bc9f4c628191bea58f796407f64bbd135aceda871cf34bb4ef09f776c46d9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4159</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 18:32:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221655)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-8] (BZ#2222368)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4159" id="RHSA-2023:4159" type="rhsa" title="RHSA-2023:4159"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22044" id="CVE-2023-22044" type="cve" title="CVE-2023-22044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221642" id="2221642" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4159.html" id="ALSA-2023:4159" type="self" title="ALSA-2023:4159"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">26a0483bcba673a1114df17c085ef5f771e598cf8a712ab2d88010adfb7125b7</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">4a399519c9c2c42740927c8809ea41219ae6792f5627d9790f843aee9f5cdac1</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">4a3f7b6c0947e53fa62c63e26081683c745ececc603ece214a2e8c874a1ed13f</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">573b21123a4cb722f4f37ffe6fb30b6af4e97f5723a696aab226ece662a11c75</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">8beeab4d21b3a4f36a5f50a7596bfdafff8b7af6f08123844d0fcfd6632a50a2</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">ec6ec03bec29e5622f2395009d1377f15289e575b27f7b9fab5edf9396170eae</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.8.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.8.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">fe8d1120c382d24c336eea2312521fadd8605813a4d1e3a4ed8a412947cd756f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4175</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-07-20 00:00:00"/>
    <updated date="2023-07-21 18:19:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* A virtual machine crash was observed in JDK 11.0.19 when executing the GregorianCalender.computeTime() method (JDK-8307683). It was found
that although the root cause of the crash is an old issue, a recent fix for a rare issue in the C2 compiler (JDK-8297951) made the crash much more likely. To mitigate this, the fix has been reverted in JDK 11.0.20 and will be reapplied once JDK-8307683 is resolved. (RHBZ#2222493)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-8] (BZ#2223101)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4175" id="RHSA-2023:4175" type="rhsa" title="RHSA-2023:4175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22006" id="CVE-2023-22006" type="cve" title="CVE-2023-22006"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22036" id="CVE-2023-22036" type="cve" title="CVE-2023-22036"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22041" id="CVE-2023-22041" type="cve" title="CVE-2023-22041"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22045" id="CVE-2023-22045" type="cve" title="CVE-2023-22045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22049" id="CVE-2023-22049" type="cve" title="CVE-2023-22049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25193" id="CVE-2023-25193" type="cve" title="CVE-2023-25193"/>
      <reference href="https://bugzilla.redhat.com/2167254" id="2167254" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221626" id="2221626" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221634" id="2221634" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221645" id="2221645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2221647" id="2221647" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2223207" id="2223207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4175.html" id="ALSA-2023:4175" type="self" title="ALSA-2023:4175"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">310f36530b48fe8cccce676546bd3cb6fc94a920b3e4b34e8b6bb6d94093d922</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">4b814e7936d40fcba874c0bf084852c332a3d43ea3f133eca4556147553d04bd</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">6c4aff2433f507f32ed76df59aedf1796712d48042f31e0e8a279dc89ac0034f</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">838319dca3b0d777a041a50c5a1f9b8f2e0e1fd5aa8678f2c03df924290d4f56</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">a5f68bb0f04bb75cbaebfc69c03882b011d60e9a8f82dfda263ae0dd754aef26</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">b2ba919463c63e0d26427dc33bbfa73b5ac885bf98106a863e2567b613612517</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.20.0.8" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.20.0.8-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">c96650f25b90b5c39d05352b509998e67dd6777756ce74aa324508cd2c15400b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4328</id>
    <title>Moderate: samba security and bug fix update</title>
    <issued date="2023-07-31 00:00:00"/>
    <updated date="2023-08-03 10:23:32"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security and bug fix update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: SMB2 packet signing is not enforced when "server signing = required" is set (CVE-2023-3347)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* The trust relationship between this workstation and the primary domain failed (BZ#2223601)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4328" id="RHSA-2023:4328" type="rhsa" title="RHSA-2023:4328"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3347" id="CVE-2023-3347" type="cve" title="CVE-2023-3347"/>
      <reference href="https://bugzilla.redhat.com/2222792" id="2222792" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4328.html" id="ALSA-2023:4328" type="self" title="ALSA-2023:4328"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="libsmbclient-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="s390x" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>libsmbclient-devel-4.17.5-3.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">3d772be2ce3fe5044598f05aec5cec8fc044465fef58fd23d758e9d119819f26</sum>
        </package>
        <package name="samba-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="s390x" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>samba-devel-4.17.5-3.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">619d1580af0097087eb36fe6eb63a40722c101774f446a8b5d31076c865cdef8</sum>
        </package>
        <package name="python3-samba-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="s390x" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>python3-samba-devel-4.17.5-3.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">72bfd10062979b4c6286700ba528864eff0c8ec9d4a25f98c3f32feef867439a</sum>
        </package>
        <package name="libnetapi-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="s390x" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>libnetapi-devel-4.17.5-3.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">bb89617fd7cc448246de6d49a8099d05c99b42745b44b7f1d211a5ca91ea6618</sum>
        </package>
        <package name="libwbclient-devel" version="4.17.5" release="3.el8_8.alma" epoch="0" arch="s390x" src="samba-4.17.5-3.el8_8.alma.src.rpm">
          <filename>libwbclient-devel-4.17.5-3.el8_8.alma.s390x.rpm</filename>
          <sum type="sha256">c4134efbcc0832e299f67c6f42d5725d0e17e134977e5c80bd864add401693c8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4643</id>
    <title>Important: .NET 7.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:34:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4643" id="RHSA-2023:4643" type="rhsa" title="RHSA-2023:4643"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4643.html" id="ALSA-2023:4643" type="self" title="ALSA-2023:4643"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.110" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.110-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.110-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">08266f23a8ac4ba59f874ec88194cef5f9f989609034b03d049ab0470d9493c5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:4645</id>
    <title>Important: .NET 6.0 security, bug fix, and enhancement update</title>
    <issued date="2023-08-14 00:00:00"/>
    <updated date="2023-08-15 08:08:47"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

* dotnet: RCE under dotnet commands (CVE-2023-35390)
* dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:4645" id="RHSA-2023:4645" type="rhsa" title="RHSA-2023:4645"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35390" id="CVE-2023-35390" type="cve" title="CVE-2023-35390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38180" id="CVE-2023-38180" type="cve" title="CVE-2023-38180"/>
      <reference href="https://bugzilla.redhat.com/2228621" id="2228621" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228622" id="2228622" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-4645.html" id="ALSA-2023:4645" type="self" title="ALSA-2023:4645"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.121" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.121-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.121-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">29f5b97efb7b633f1cc6abb0d3208ad4948ba23392edbb82a14742d80e816e5d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5046</id>
    <title>Important: flac security update</title>
    <issued date="2023-09-11 00:00:00"/>
    <updated date="2023-09-12 10:20:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flac security update</summary>
    <description>FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5046" id="RHSA-2023:5046" type="rhsa" title="RHSA-2023:5046"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-22219" id="CVE-2020-22219" type="cve" title="CVE-2020-22219"/>
      <reference href="https://bugzilla.redhat.com/2235489" id="2235489" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5046.html" id="ALSA-2023:5046" type="self" title="ALSA-2023:5046"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="flac-devel" version="1.3.2" release="9.el8_8.1" epoch="0" arch="s390x" src="flac-1.3.2-9.el8_8.1.src.rpm">
          <filename>flac-devel-1.3.2-9.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">07ba3b3ecd74dba53b6480ed74cec7e568f0eca9f7f2c9a01e6a61a6423a492e</sum>
        </package>
        <package name="flac" version="1.3.2" release="9.el8_8.1" epoch="0" arch="s390x" src="flac-1.3.2-9.el8_8.1.src.rpm">
          <filename>flac-1.3.2-9.el8_8.1.s390x.rpm</filename>
          <sum type="sha256">85fb133f2ae6ec3a57538c242532a4633c1cd098ab50677d3438b79e4a1da158</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5144</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 11:00:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.122 and .NET Runtime 6.0.22.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5144" id="RHSA-2023:5144" type="rhsa" title="RHSA-2023:5144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5144.html" id="ALSA-2023:5144" type="self" title="ALSA-2023:5144"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.122" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.122-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">8d84d3df784a5751146873437b7030531986a984e855b42345bbd6975f5377e1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5145</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-09-13 00:00:00"/>
    <updated date="2023-09-14 10:22:22"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.111 and .NET Runtime 7.0.11.

Security Fix(es):

* dotnet:  Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5145" id="RHSA-2023:5145" type="rhsa" title="RHSA-2023:5145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5145.html" id="ALSA-2023:5145" type="self" title="ALSA-2023:5145"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.111" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.111-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.111-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">5cdbd40904005ae361334552527773e49ff905a6154a85e70ce001093d2ecfe5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5264</id>
    <title>Important: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2023-09-19 00:00:00"/>
    <updated date="2023-09-22 15:41:14"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)
* NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* "No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks. (BZ#2228485)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5264" id="RHSA-2023:5264" type="rhsa" title="RHSA-2023:5264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40284" id="CVE-2022-40284" type="cve" title="CVE-2022-40284"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3354" id="CVE-2023-3354" type="cve" title="CVE-2023-3354"/>
      <reference href="https://bugzilla.redhat.com/2216478" id="2216478" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2236130" id="2236130" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5264.html" id="ALSA-2023:5264" type="self" title="ALSA-2023:5264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="33.module_el8.8.0+3612+f18d2b89.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1.s390x.rpm</filename>
          <sum type="sha256">57b3eb7cf775ef2f95b5a152645b0491f5907d7677377c025c0b2b7de04f7996</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5353</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2023-09-26 00:00:00"/>
    <updated date="2023-09-27 09:26:33"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
* libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
* libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
* libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
* libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5353" id="RHSA-2023:5353" type="rhsa" title="RHSA-2023:5353"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0800" id="CVE-2023-0800" type="cve" title="CVE-2023-0800"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0801" id="CVE-2023-0801" type="cve" title="CVE-2023-0801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0802" id="CVE-2023-0802" type="cve" title="CVE-2023-0802"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0803" id="CVE-2023-0803" type="cve" title="CVE-2023-0803"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0804" id="CVE-2023-0804" type="cve" title="CVE-2023-0804"/>
      <reference href="https://bugzilla.redhat.com/2170167" id="2170167" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170172" id="2170172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170178" id="2170178" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170187" id="2170187" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2170192" id="2170192" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5353.html" id="ALSA-2023:5353" type="self" title="ALSA-2023:5353"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="libtiff-tools" version="4.0.9" release="29.el8_8" epoch="0" arch="s390x" src="libtiff-4.0.9-29.el8_8.src.rpm">
          <filename>libtiff-tools-4.0.9-29.el8_8.s390x.rpm</filename>
          <sum type="sha256">fd957df3af1eedec3824b0db4a1f205567a59576ea4190dfa512fcb42cd0d254</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5455</id>
    <title>Important: glibc security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-05 23:16:31"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: buffer overflow in ld.so leading to privilege escalation (CVE-2023-4911)
* glibc: Stack read overflow in getaddrinfo in no-aaaa mode (CVE-2023-4527)
* glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)
* glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5455" id="RHSA-2023:5455" type="rhsa" title="RHSA-2023:5455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4527" id="CVE-2023-4527" type="cve" title="CVE-2023-4527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4806" id="CVE-2023-4806" type="cve" title="CVE-2023-4806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4813" id="CVE-2023-4813" type="cve" title="CVE-2023-4813"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4911" id="CVE-2023-4911" type="cve" title="CVE-2023-4911"/>
      <reference href="https://bugzilla.redhat.com/2234712" id="2234712" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237782" id="2237782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2237798" id="2237798" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2238352" id="2238352" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5455.html" id="ALSA-2023:5455" type="self" title="ALSA-2023:5455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="glibc-benchtests" version="2.28" release="225.el8_8.6" epoch="0" arch="s390x" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-benchtests-2.28-225.el8_8.6.s390x.rpm</filename>
          <sum type="sha256">05d967ebb4c57207f6c1f3646b3469f03a1ddf0820a5fa1669748f6ed128c836</sum>
        </package>
        <package name="glibc-static" version="2.28" release="225.el8_8.6" epoch="0" arch="s390x" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-static-2.28-225.el8_8.6.s390x.rpm</filename>
          <sum type="sha256">67b54daaa04244fbf61d92cad09d4d5b430899cf08201fff5878eb89e21309d4</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="225.el8_8.6" epoch="0" arch="s390x" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>glibc-nss-devel-2.28-225.el8_8.6.s390x.rpm</filename>
          <sum type="sha256">69c0f00e5b197bde677a253a54a0561607afd55b3429f31167b1f458998ebeb3</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="225.el8_8.6" epoch="0" arch="s390x" src="glibc-2.28-225.el8_8.6.src.rpm">
          <filename>nss_hesiod-2.28-225.el8_8.6.s390x.rpm</filename>
          <sum type="sha256">eea4ee9eb3acc5683f76a61ce79ce39aaf78d901425aaf54b82166037d39666c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5460</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 10:02:12"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5460" id="RHSA-2023:5460" type="rhsa" title="RHSA-2023:5460"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3341" id="CVE-2023-3341" type="cve" title="CVE-2023-3341"/>
      <reference href="https://bugzilla.redhat.com/2239621" id="2239621" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5460.html" id="ALSA-2023:5460" type="self" title="ALSA-2023:5460"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">005476981a7851a4fdb83eced9d3e3dce81548a8326dcfd2d6be1201dcf99bf9</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.14.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">5d84c7719bb5ddba51d00175b26bff26333f6904f08bf6408084927fb24c80c6</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.14.el8_8.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">8e544110bed059bf34466eff737b3a9b9ccada47075189a9d8580dcb84244ce4</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.14.el8_8.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.14.el8_8.2.alma.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.14.el8_8.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">9bac311e67d6143fe172cdb57f79b71f971ca89ce688c627236f41fc97e60042</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5463</id>
    <title>Important: python3.11 security update</title>
    <issued date="2023-10-05 00:00:00"/>
    <updated date="2023-10-06 09:33:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5463" id="RHSA-2023:5463" type="rhsa" title="RHSA-2023:5463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5463.html" id="ALSA-2023:5463" type="self" title="ALSA-2023:5463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="python3.11-test" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-test-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">108736ad65e67ff5f730bf987d2ed6706e1ac8676d86eb560a8b6b3ebd5b8b25</sum>
        </package>
        <package name="python3.11-idle" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-idle-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">3b83465fc4a0149283e18d5b978907270508e69b305a2148a3f2a8fc3a71ae1f</sum>
        </package>
        <package name="python3.11-devel" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-devel-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">834ddd564425d86e1142362e5c7ad5bea9d3b8b4a722885534aa8c3cfa8e871f</sum>
        </package>
        <package name="python3.11-tkinter" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-tkinter-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">b37550e0ad03d85037ebb1d8c6396ecbfe24d9932c81fa3d8af3cfd516702307</sum>
        </package>
        <package name="python3.11-debug" version="3.11.2" release="2.el8_8.2" epoch="0" arch="s390x" src="python3.11-3.11.2-2.el8_8.2.src.rpm">
          <filename>python3.11-debug-3.11.2-2.el8_8.2.s390x.rpm</filename>
          <sum type="sha256">c2bf6a81f24d281e9ee3e321691398192bd6199710deb8923520c2409bdf77df</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5537</id>
    <title>Important: libvpx security update</title>
    <issued date="2023-10-09 00:00:00"/>
    <updated date="2023-10-10 08:12:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217)
* libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5537" id="RHSA-2023:5537" type="rhsa" title="RHSA-2023:5537"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44488" id="CVE-2023-44488" type="cve" title="CVE-2023-44488"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5217" id="CVE-2023-5217" type="cve" title="CVE-2023-5217"/>
      <reference href="https://bugzilla.redhat.com/2241191" id="2241191" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241806" id="2241806" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5537.html" id="ALSA-2023:5537" type="self" title="ALSA-2023:5537"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="libvpx-devel" version="1.7.0" release="10.el8_8.alma.1" epoch="0" arch="s390x" src="libvpx-1.7.0-10.el8_8.alma.1.src.rpm">
          <filename>libvpx-devel-1.7.0-10.el8_8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8f760e7d575c1ab48edad35b0f971a542f2fc94d984f00103acd2ab26cf4ac05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5709</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-17 11:22:39"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 7.0 to SDK 7.0.112 and Runtime 7.0.12.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5709" id="RHSA-2023:5709" type="rhsa" title="RHSA-2023:5709"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5709.html" id="ALSA-2023:5709" type="self" title="ALSA-2023:5709"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.112" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.112-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.112-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">9df9fd4f2bf89722bc9bd5045e8cd6d2128bff80f6585ed14862e8469d7bccd5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5710</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2023-10-16 00:00:00"/>
    <updated date="2023-10-20 06:45:34"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.123 and Runtime 6.0.23.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5710" id="RHSA-2023:5710" type="rhsa" title="RHSA-2023:5710"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5710.html" id="ALSA-2023:5710" type="self" title="ALSA-2023:5710"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.123" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.123-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.123-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">87751f05ea5dd628e0cc809a5b3d3e636707b269b729be93fb022adb7174e02a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5742</id>
    <title>Moderate: java-11-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 14:22:54"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security and bug fix update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 11.0.20 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 11.0.20.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237170)
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 11.0.20 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 11.0.20.1, increases it to 16 MB.
* The serviceability agent would print an exception when encountering null addresses while producing thread dumps. These null values are now handled appropriately. (JDK-8243210, AlmaLinux-2763)
* The /usr/bin/jfr alternative is now owned by the java-11-openjdk package (AlmaLinux-13559)
* The jcmd tool is now provided by the java-11-openjdk-headless package, rather than java-11-openjdk-devel, to make it more accessible (AlmaLinux-13566)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5742" id="RHSA-2023:5742" type="rhsa" title="RHSA-2023:5742"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5742.html" id="ALSA-2023:5742" type="self" title="ALSA-2023:5742"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">51c9ce9c80fc81dc0b7fbd00d857852cfe2b7748e12334d15982214fe836f105</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">738a8411284001c6d0ffb64fccf1cde9bfd3ae4abf4cffea08e29010316a6733</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">798137e14b9297ea6a138109d08ebf5a68ca6a2d679bdc4cbc350701ce9d1fe3</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">89a91d0429052fdf055e21863b084570a19ae2b7956a6f10fb20f33904bd8daf</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">a0830bb8850e25082edb5243b5fb92e42a050cb071d9cdc5faef76d3df030679</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">db252a9e5bbeba6699fefbff6370c96648a8e8d21966a73d338c88f71e165696</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.21.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.21.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.21.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">e89c9d96b93fae5a0bddb8bd90d384f1f577edf77dda1e09506a0dcbf70eeb79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5751</id>
    <title>Moderate: java-17-openjdk security and bug fix update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-20 13:54:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security and bug fix update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 17.0.8 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 17.0.9, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true. (RHBZ#2237178)
* The /usr/bin/jfr alternative is now owned by the java-17-openjdk package (AlmaLinux-13708)
* The jcmd tool is now provided by the java-17-openjdk-headless package, rather than java-17-openjdk-devel, to make it more accessible (AlmaLinux-13658)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5751" id="RHSA-2023:5751" type="rhsa" title="RHSA-2023:5751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5751.html" id="ALSA-2023:5751" type="self" title="ALSA-2023:5751"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">26f7f14b3725960cd7e87a3459540bbb039a2439607079107926e727bbdfb304</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">623266fe6c4c20a2d668b7c475795a4a43cb1f8a6d80f620589ae120c8340487</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">69a4a4c24f74acc37e43781cc5eda581590dc8b616f0cb6b07824dd0e1028769</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">b574f31c15c37563c62501f714eac64c8cb7d420aec262df03831101a3336818</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">dd6fa412c45ca63310e41759cc7def3e31a9a2a7be3532a83bb47187c0e45405</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">e8149e3383d3d8f8b2737198b1b34ce00db34a07276801c9c91c4709934fe1cf</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.9.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.9.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.9.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">f40cd05fd5213a67de22a9cd55b29308b1b24943a6a6c8a0299f8f92a773bee7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5837</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2023-10-18 00:00:00"/>
    <updated date="2023-10-19 08:08:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>nghttp2 contains the Hypertext Transfer Protocol version 2 (HTTP/2) client, server, and proxy programs as well as a library implementing the HTTP/2 protocol in C.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5837" id="RHSA-2023:5837" type="rhsa" title="RHSA-2023:5837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44487" id="CVE-2023-44487" type="cve" title="CVE-2023-44487"/>
      <reference href="https://bugzilla.redhat.com/2242803" id="2242803" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5837.html" id="ALSA-2023:5837" type="self" title="ALSA-2023:5837"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="nghttp2" version="1.33.0" release="5.el8_8" epoch="0" arch="s390x" src="nghttp2-1.33.0-5.el8_8.src.rpm">
          <filename>nghttp2-1.33.0-5.el8_8.s390x.rpm</filename>
          <sum type="sha256">13a7f79b8bb78c785bc0d1219bbaa48d24af0bff882ddbf164986b7aa6b77a1c</sum>
        </package>
        <package name="libnghttp2-devel" version="1.33.0" release="5.el8_8" epoch="0" arch="s390x" src="nghttp2-1.33.0-5.el8_8.src.rpm">
          <filename>libnghttp2-devel-1.33.0-5.el8_8.s390x.rpm</filename>
          <sum type="sha256">27a353199bc9da2f07e8c8334d30874516e008cb767e97b1de1145e2a837359a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:5998</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-10-23 00:00:00"/>
    <updated date="2023-10-25 07:21:01"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: TLS handshake bypass (CVE-2023-40217)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:5998" id="RHSA-2023:5998" type="rhsa" title="RHSA-2023:5998"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40217" id="CVE-2023-40217" type="cve" title="CVE-2023-40217"/>
      <reference href="https://bugzilla.redhat.com/2235789" id="2235789" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-5998.html" id="ALSA-2023:5998" type="self" title="ALSA-2023:5998"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <module name="python39" stream="3.9" version="8060020220421104152" context="b9465af8" arch="s390x"/>
        <package name="python39-debug" version="3.9.16" release="1.module_el8.8.0+3664+2b1e4686.2" epoch="0" arch="s390x" src="python39-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.src.rpm">
          <filename>python39-debug-3.9.16-1.module_el8.8.0+3664+2b1e4686.2.s390x.rpm</filename>
          <sum type="sha256">016d533c9725f5e48b9071395677957848106cdf2b9926b05ee5c79a0ad7b55b</sum>
        </package>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6245</id>
    <title>Moderate: .NET 6.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-03 10:15:10"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.124 and .NET Runtime 6.0.24.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6245" id="RHSA-2023:6245" type="rhsa" title="RHSA-2023:6245"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6245.html" id="ALSA-2023:6245" type="self" title="ALSA-2023:6245"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.124" release="1.el8_8" epoch="0" arch="s390x" src="dotnet6.0-6.0.124-1.el8_8.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.124-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">7dd54d1d9196078299b0f5c653ba498b3a12615f65846de12bf8a0ef527a11d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6247</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2023-11-01 00:00:00"/>
    <updated date="2023-11-09 06:18:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.113 and .NET Runtime 7.0.13.

Security Fix(es):

* dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6247" id="RHSA-2023:6247" type="rhsa" title="RHSA-2023:6247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36799" id="CVE-2023-36799" type="cve" title="CVE-2023-36799"/>
      <reference href="https://bugzilla.redhat.com/2237317" id="2237317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6247.html" id="ALSA-2023:6247" type="self" title="ALSA-2023:6247"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_8_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_8_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.113" release="1.el8_8" epoch="0" arch="s390x" src="dotnet7.0-7.0.113-1.el8_8.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.113-1.el8_8.s390x.rpm</filename>
          <sum type="sha256">3f8d815f0c3a945b3fbd3423c5b8715eaabf1ee561060ef60ada7fbb41cefa85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6887</id>
    <title>Moderate: java-21-openjdk security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 10:51:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security and bug fix update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: memory corruption issue on x86_64 with AVX-512 (8317121) (CVE-2023-22025)
* OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Additional validity checks in the handling of Zip64 files, JDK-8302483, were introduced in the 21.0.0 release of OpenJDK, causing the use of some valid zip files to now fail with an error. This release, 21.0.1, allows for zero-length headers and additional padding produced by some Zip64 creation tools. With both releases, the checks can be disabled using -Djdk.util.zip.disableZip64ExtraFieldValidation=true.
* A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 20.0.0 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 20.0.1, increases it to 16 MB. (AlmaLinux-14952)
* When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-14961)
* Installing the same java-21-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-21-openjdk-headless package. This prevented the use of the dynamic dump feature, because the checksum in the archive would be different on each system. This release resolves this issue by using the .jsa files generated during the initial build. (AlmaLinux-14944)
* The /usr/bin/jfr alternative is now owned by the java-21-openjdk package. (AlmaLinux-14960)
* The jcmd tool is now provided by the java-21-openjdk-headless package, rather than java-21-openjdk-devel, to make it more accessible. (AlmaLinux-14950)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6887" id="RHSA-2023:6887" type="rhsa" title="RHSA-2023:6887"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22025" id="CVE-2023-22025" type="cve" title="CVE-2023-22025"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-22081" id="CVE-2023-22081" type="cve" title="CVE-2023-22081"/>
      <reference href="https://bugzilla.redhat.com/2243627" id="2243627" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2243805" id="2243805" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6887.html" id="ALSA-2023:6887" type="self" title="ALSA-2023:6887"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">24e02ba1b040ab2a117e950416a93696ec9de679947da718f6581a60ad75c3d4</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">566a9a246828d7f8d542546517e9f207f0b7888b501ffb0656545eca56f04148</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">b024afa3ac616dd8d178295ab61daa12979fb8f670634b4bf8d71cb6367049ca</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f2bf57ca8a176f6b75568fc8d837d2a627d0bb613297cfef08e1387e23dd71f7</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f580dd89d853cb9e2c18ed50eeff9169e664448090a267328e57fa3f21a2ccd0</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f61aea56528f1fa0f93468d71982adc35cbe91a01c983e3e407fe2f19e1caffe</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.1.0.12" release="2.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.1.0.12-2.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.1.0.12-2.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">fc2d776f5ebc1fc617cbcf720bff2940cbf61ef245af5feb297397fa5d13a22b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6916</id>
    <title>Moderate: xorg-x11-server security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:25"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security and bug fix update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability (CVE-2023-1393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6916" id="RHSA-2023:6916" type="rhsa" title="RHSA-2023:6916"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1393" id="CVE-2023-1393" type="cve" title="CVE-2023-1393"/>
      <reference href="https://bugzilla.redhat.com/2180288" id="2180288" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6916.html" id="ALSA-2023:6916" type="self" title="ALSA-2023:6916"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="17.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-17.el8.s390x.rpm</filename>
          <sum type="sha256">7e2f657d7f4397068318c2ff7d51e3c87ec9379fc213902bb83a934ca21e0214</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="17.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-17.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-17.el8.noarch.rpm</filename>
          <sum type="sha256">df88a75a177c38c6fc2f4ef08f403808e7469ce5574590782cd172152f534b96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6967</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:44"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6967" id="RHSA-2023:6967" type="rhsa" title="RHSA-2023:6967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33285" id="CVE-2023-33285" type="cve" title="CVE-2023-33285"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34410" id="CVE-2023-34410" type="cve" title="CVE-2023-34410"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-37369" id="CVE-2023-37369" type="cve" title="CVE-2023-37369"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38197" id="CVE-2023-38197" type="cve" title="CVE-2023-38197"/>
      <reference href="https://bugzilla.redhat.com/2209488" id="2209488" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2212747" id="2212747" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222767" id="2222767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2232173" id="2232173" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6967.html" id="ALSA-2023:6967" type="self" title="ALSA-2023:6967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="qt5-qtbase-static" version="5.15.3" release="5.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-5.el8.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-5.el8.s390x.rpm</filename>
          <sum type="sha256">52cf8660e7622cac37f6d7fc86d0ecc14cef1108ce6b82748fccbc250d1aeda9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:6980</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-24 14:33:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security, bug fix, and enhancement update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free (CVE-2021-3750)
* QEMU: net: triggerable assertion due to race condition in hot-unplug (CVE-2023-3301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:6980" id="RHSA-2023:6980" type="rhsa" title="RHSA-2023:6980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3750" id="CVE-2021-3750" type="cve" title="CVE-2021-3750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3301" id="CVE-2023-3301" type="cve" title="CVE-2023-3301"/>
      <reference href="https://bugzilla.redhat.com/1999073" id="1999073" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2215784" id="2215784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-6980.html" id="ALSA-2023:6980" type="self" title="ALSA-2023:6980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <module name="virt" stream="rhel" version="8060020220803091505" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="40.module_el8.9.0+3681+41cbbcc0.1.alma.1" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-40.module_el8.9.0+3681+41cbbcc0.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">42d24118634532bf1733421789fe4ce7f9aa0f3ebe9f736bcb2f9ffea179f2f7</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7015</id>
    <title>Moderate: wireshark security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:45"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>wireshark security update</summary>
    <description>The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network.

Security Fix(es):

* wireshark: RTPS dissector crash (CVE-2023-0666)
* wireshark: VMS TCPIPtrace file parser crash (CVE-2023-2856)
* wireshark: NetScaler file parser crash (CVE-2023-2858)
* wireshark: XRA dissector infinite loop (CVE-2023-2952)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7015" id="RHSA-2023:7015" type="rhsa" title="RHSA-2023:7015"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-0666" id="CVE-2023-0666" type="cve" title="CVE-2023-0666"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2856" id="CVE-2023-2856" type="cve" title="CVE-2023-2856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2858" id="CVE-2023-2858" type="cve" title="CVE-2023-2858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2952" id="CVE-2023-2952" type="cve" title="CVE-2023-2952"/>
      <reference href="https://bugzilla.redhat.com/2210824" id="2210824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210829" id="2210829" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2210832" id="2210832" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2211406" id="2211406" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7015.html" id="ALSA-2023:7015" type="self" title="ALSA-2023:7015"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="wireshark-devel" version="2.6.2" release="17.el8" epoch="1" arch="s390x" src="wireshark-2.6.2-17.el8.src.rpm">
          <filename>wireshark-devel-2.6.2-17.el8.s390x.rpm</filename>
          <sum type="sha256">7a5df224c6888cbf49f6bbb28bc20ab1413663e570a9bccb2f4a07fb2d60ca18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7024</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:24"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python: file path truncation at \0 characters (CVE-2023-41105)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7024" id="RHSA-2023:7024" type="rhsa" title="RHSA-2023:7024"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41105" id="CVE-2023-41105" type="cve" title="CVE-2023-41105"/>
      <reference href="https://bugzilla.redhat.com/2235795" id="2235795" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7024.html" id="ALSA-2023:7024" type="self" title="ALSA-2023:7024"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="python3.11-test" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-test-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">5260b0985259f73f314979e8ef6d2694d089b2afa5b6e743150ef9dc7fbbf983</sum>
        </package>
        <package name="python3.11-idle" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-idle-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">b2b48951ce9e4fd0ebde5edec5204da7531688c2dfc82a72ddc4550f6837954a</sum>
        </package>
        <package name="python3.11-debug" version="3.11.5" release="1.el8_9" epoch="0" arch="s390x" src="python3.11-3.11.5-1.el8_9.src.rpm">
          <filename>python3.11-debug-3.11.5-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">dde029920d3c56daeebaf09f182db43aae065c815de8e6d83daa8df7f9f27170</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7034</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:19:52"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)
* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7034" id="RHSA-2023:7034" type="rhsa" title="RHSA-2023:7034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2007-4559" id="CVE-2007-4559" type="cve" title="CVE-2007-4559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-32681" id="CVE-2023-32681" type="cve" title="CVE-2023-32681"/>
      <reference href="https://bugzilla.redhat.com/2209469" id="2209469" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/263261" id="263261" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7034.html" id="ALSA-2023:7034" type="self" title="ALSA-2023:7034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <module name="python39" stream="3.9" version="8060020220421104152" context="b9465af8" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-debug" version="3.9.18" release="1.module_el8.9.0+3672+853baa42" epoch="0" arch="s390x" src="python39-3.9.18-1.module_el8.9.0+3672+853baa42.src.rpm">
          <filename>python39-debug-3.9.18-1.module_el8.9.0+3672+853baa42.s390x.rpm</filename>
          <sum type="sha256">6757d9fa9e6318a1fe5e6037e443dc9b88c1956e63ea35ad28b0785ab37037f8</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7038</id>
    <title>Moderate: flatpak security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:46"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>flatpak security, bug fix, and enhancement update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

The following packages have been upgraded to a later upstream version: flatpak (1.10.8). (BZ#2222103)

Security Fix(es):

* flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console (CVE-2023-28100)
* flatpak: Metadata with ANSI control codes can cause misleading terminal output (CVE-2023-28101)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7038" id="RHSA-2023:7038" type="rhsa" title="RHSA-2023:7038"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28100" id="CVE-2023-28100" type="cve" title="CVE-2023-28100"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28101" id="CVE-2023-28101" type="cve" title="CVE-2023-28101"/>
      <reference href="https://bugzilla.redhat.com/2179219" id="2179219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2179220" id="2179220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7038.html" id="ALSA-2023:7038" type="self" title="ALSA-2023:7038"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="flatpak-devel" version="1.10.8" release="1.el8" epoch="0" arch="s390x" src="flatpak-1.10.8-1.el8.src.rpm">
          <filename>flatpak-devel-1.10.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">c55a1d20fde2791366905f7d682ca52f170e66426f5a9ebce46e41f9a44618b6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7053</id>
    <title>Moderate: ghostscript security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-22 13:51:20"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security and bug fix update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: buffer overflow in base/sbcp.c leading to data corruption (CVE-2023-28879)
* ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS (CVE-2023-38559)
* ghostscript: Incomplete fix for CVE-2020-16305 (CVE-2023-4042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7053" id="RHSA-2023:7053" type="rhsa" title="RHSA-2023:7053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-28879" id="CVE-2023-28879" type="cve" title="CVE-2023-28879"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38559" id="CVE-2023-38559" type="cve" title="CVE-2023-38559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4042" id="CVE-2023-4042" type="cve" title="CVE-2023-4042"/>
      <reference href="https://bugzilla.redhat.com/2184585" id="2184585" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2224367" id="2224367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2228151" id="2228151" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7053.html" id="ALSA-2023:7053" type="self" title="ALSA-2023:7053"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">27a4cd294c0d8bb17a03d43c2ea3aea221a507a159c6b8376373a483ad708e29</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>libgs-devel-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">5e4fed4e67245e59239baa59dbdee4f3b94be0bc2ecb709e624ae3f9deb5e77b</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-tools-printing-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">d56ed720d2042ac4712aab578aeb6cee96e9e2086031a981099f78833cbc4f3f</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.27" release="11.el8" epoch="0" arch="s390x" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-11.el8.s390x.rpm</filename>
          <sum type="sha256">d776d1246b5a925e69943d09e67d5e277ca3d8a08c3377a9d87e932b26e556b6</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="11.el8" epoch="0" arch="noarch" src="ghostscript-9.27-11.el8.src.rpm">
          <filename>ghostscript-doc-9.27-11.el8.noarch.rpm</filename>
          <sum type="sha256">fdc61e8e31a677b70d94c5ca67620c11fc53d1d0d14191361bdc06b0b2e04c3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7057</id>
    <title>Moderate: yajl security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:48"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>yajl security update</summary>
    <description>Yet Another JSON Library (YAJL) is a small event-driven (SAX-style) JSON parser written in ANSI C, and a small validating JSON generator.

Security Fix(es):

* yajl: Memory leak in yajl_tree_parse function (CVE-2023-33460)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7057" id="RHSA-2023:7057" type="rhsa" title="RHSA-2023:7057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-33460" id="CVE-2023-33460" type="cve" title="CVE-2023-33460"/>
      <reference href="https://bugzilla.redhat.com/2221249" id="2221249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7057.html" id="ALSA-2023:7057" type="self" title="ALSA-2023:7057"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="yajl-devel" version="2.1.0" release="12.el8" epoch="0" arch="s390x" src="yajl-2.1.0-12.el8.src.rpm">
          <filename>yajl-devel-2.1.0-12.el8.s390x.rpm</filename>
          <sum type="sha256">3df8ad0a67fa66bec8bc2bfccda1c8c39025fe54ff938aa80106359fd42776ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7090</id>
    <title>Moderate: libmicrohttpd security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:22:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libmicrohttpd security update</summary>
    <description>GNU libmicrohttpd is a small C library that makes it easy to run an HTTP server as part of another application.

Security Fix(es):

* libmicrohttpd: remote DoS (CVE-2023-27371)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7090" id="RHSA-2023:7090" type="rhsa" title="RHSA-2023:7090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27371" id="CVE-2023-27371" type="cve" title="CVE-2023-27371"/>
      <reference href="https://bugzilla.redhat.com/2174313" id="2174313" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7090.html" id="ALSA-2023:7090" type="self" title="ALSA-2023:7090"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="libmicrohttpd-doc" version="0.9.59" release="3.el8" epoch="1" arch="noarch" src="libmicrohttpd-0.9.59-3.el8.src.rpm">
          <filename>libmicrohttpd-doc-0.9.59-3.el8.noarch.rpm</filename>
          <sum type="sha256">33a49b2fe35591ea8d5cfec95e00b4fdfc48122102bf7f4094151c694fc3e613</sum>
        </package>
        <package name="libmicrohttpd-devel" version="0.9.59" release="3.el8" epoch="1" arch="s390x" src="libmicrohttpd-0.9.59-3.el8.src.rpm">
          <filename>libmicrohttpd-devel-0.9.59-3.el8.s390x.rpm</filename>
          <sum type="sha256">c9cf215ac08c405cbe1758cef1d8f7b8e7b85f782e09f2eb29a9f637c4b8be2b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7112</id>
    <title>Low: shadow-utils security and bug fix update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:49"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>shadow-utils security and bug fix update</summary>
    <description>The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. 

Security Fix(es):

* shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7112" id="RHSA-2023:7112" type="rhsa" title="RHSA-2023:7112"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4641" id="CVE-2023-4641" type="cve" title="CVE-2023-4641"/>
      <reference href="https://bugzilla.redhat.com/2215945" id="2215945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7112.html" id="ALSA-2023:7112" type="self" title="ALSA-2023:7112"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="shadow-utils-subid-devel" version="4.6" release="19.el8" epoch="2" arch="s390x" src="shadow-utils-4.6-19.el8.src.rpm">
          <filename>shadow-utils-subid-devel-4.6-19.el8.s390x.rpm</filename>
          <sum type="sha256">9661db3ba9b983887a8071f0c6555b57cb5b68dbf9efb2e71923b6a19f4b8c4f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7139</id>
    <title>Moderate: samba security, bug fix, and enhancement update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:20:15"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security, bug fix, and enhancement update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

The following packages have been upgraded to a later upstream version: samba (4.18.6). (BZ#2190417)

Security Fix(es):

* samba: out-of-bounds read in winbind AUTH_CRAP (CVE-2022-2127)
* samba: infinite loop in mdssvc RPC service for spotlight (CVE-2023-34966)
* samba: type confusion in mdssvc RPC service for spotlight (CVE-2023-34967)
* samba: spotlight server-side share path disclosure (CVE-2023-34968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7139" id="RHSA-2023:7139" type="rhsa" title="RHSA-2023:7139"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-2127" id="CVE-2022-2127" type="cve" title="CVE-2022-2127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34966" id="CVE-2023-34966" type="cve" title="CVE-2023-34966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34967" id="CVE-2023-34967" type="cve" title="CVE-2023-34967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-34968" id="CVE-2023-34968" type="cve" title="CVE-2023-34968"/>
      <reference href="https://bugzilla.redhat.com/2222791" id="2222791" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222793" id="2222793" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222794" id="2222794" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2222795" id="2222795" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7139.html" id="ALSA-2023:7139" type="self" title="ALSA-2023:7139"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="libnetapi-devel" version="4.18.6" release="1.el8" epoch="0" arch="s390x" src="samba-4.18.6-1.el8.src.rpm">
          <filename>libnetapi-devel-4.18.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">4a259ae2eebacd6b60360f033d81f4d0f6ca804eff0924305bdea9a42e4ab4a8</sum>
        </package>
        <package name="libwbclient-devel" version="4.18.6" release="1.el8" epoch="0" arch="s390x" src="samba-4.18.6-1.el8.src.rpm">
          <filename>libwbclient-devel-4.18.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">710da6f56f63be8834cc4f5a2d1d93bd3b52e38d6a66462aa4851f61de7be3d3</sum>
        </package>
        <package name="python3-samba-devel" version="4.18.6" release="1.el8" epoch="0" arch="s390x" src="samba-4.18.6-1.el8.src.rpm">
          <filename>python3-samba-devel-4.18.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">c296e9e5c26fa66aa234fb75f18b6c57402a953d35a83bd8bb081be5e00056a1</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="1.el8" epoch="0" arch="s390x" src="samba-4.18.6-1.el8.src.rpm">
          <filename>libsmbclient-devel-4.18.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">f0f36fd9bb58a2fc065ebebff1392bf6ee939359fce03d092d789a04a0962f47</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="1.el8" epoch="0" arch="s390x" src="samba-4.18.6-1.el8.src.rpm">
          <filename>samba-devel-4.18.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">f29efabf49586e232a37c729a2e3d519aa64ddc5447860633df08e26c81a3f69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7150</id>
    <title>Moderate: librabbitmq security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:51"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>librabbitmq security update</summary>
    <description>The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

* rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7150" id="RHSA-2023:7150" type="rhsa" title="RHSA-2023:7150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-35789" id="CVE-2023-35789" type="cve" title="CVE-2023-35789"/>
      <reference href="https://bugzilla.redhat.com/2215762" id="2215762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7150.html" id="ALSA-2023:7150" type="self" title="ALSA-2023:7150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="librabbitmq-devel" version="0.9.0" release="4.el8" epoch="0" arch="s390x" src="librabbitmq-0.9.0-4.el8.src.rpm">
          <filename>librabbitmq-devel-0.9.0-4.el8.s390x.rpm</filename>
          <sum type="sha256">37520b91af427867f0cd877c3be00bf5be249d35af990149b0f96aee20280d8a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7187</id>
    <title>Low: procps-ng security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>procps-ng security update</summary>
    <description>The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

* procps: ps buffer overflow (CVE-2023-4016)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7187" id="RHSA-2023:7187" type="rhsa" title="RHSA-2023:7187"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4016" id="CVE-2023-4016" type="cve" title="CVE-2023-4016"/>
      <reference href="https://bugzilla.redhat.com/2228494" id="2228494" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7187.html" id="ALSA-2023:7187" type="self" title="ALSA-2023:7187"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="procps-ng-devel" version="3.3.15" release="14.el8" epoch="0" arch="s390x" src="procps-ng-3.3.15-14.el8.src.rpm">
          <filename>procps-ng-devel-3.3.15-14.el8.s390x.rpm</filename>
          <sum type="sha256">59590dd18070287eeda0c1535e2f71a7baebe1d05a3b1a2faf8c8edd83af3403</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7189</id>
    <title>Moderate: fwupd security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:18:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fwupd security update</summary>
    <description>The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7189" id="RHSA-2023:7189" type="rhsa" title="RHSA-2023:7189"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-3287" id="CVE-2022-3287" type="cve" title="CVE-2022-3287"/>
      <reference href="https://bugzilla.redhat.com/2129904" id="2129904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7189.html" id="ALSA-2023:7189" type="self" title="ALSA-2023:7189"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="fwupd-devel" version="1.7.8" release="2.el8" epoch="0" arch="s390x" src="fwupd-1.7.8-2.el8.src.rpm">
          <filename>fwupd-devel-1.7.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">efbfd7f383a5356754416641fb3e878438eb6fb2fe2b62c0e7db8c6a34e54690</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7190</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-11-14 00:00:00"/>
    <updated date="2023-11-23 10:21:09"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: avahi-daemon can be crashed via DBus (CVE-2023-1981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7190" id="RHSA-2023:7190" type="rhsa" title="RHSA-2023:7190"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-1981" id="CVE-2023-1981" type="cve" title="CVE-2023-1981"/>
      <reference href="https://bugzilla.redhat.com/2185911" id="2185911" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7190.html" id="ALSA-2023:7190" type="self" title="ALSA-2023:7190"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="avahi-compat-howl-devel" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-howl-devel-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">090b03f5189dd0c3ccd6af60424adf8f30abcfdcfcf5920e6988341877a70ec7</sum>
        </package>
        <package name="avahi-ui" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-ui-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">1707f53667a5912428cfdcfa510901a87b1a5a4ff6bcfcaf523099ee893edbc5</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-libdns_sd-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">1d98ef0ca2571348895eefd059b913079494b766b2395546bef5887e8e4f9ea4</sum>
        </package>
        <package name="avahi-gobject-devel" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-gobject-devel-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">4f5e464a79d2fa6dc4676f7e9211be6b11bbaefdaa32cfe462833bf4b7ce133f</sum>
        </package>
        <package name="avahi-compat-howl" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-howl-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">5ea65b8c9795f64bd638653b6ce467ede2f7b49cbbcab169ff1f38825087650b</sum>
        </package>
        <package name="avahi-ui-devel" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-ui-devel-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">7d219680fe4d862b993cffd7f025a2ad8eb481abbcd50cbfa094f65b9fc44a28</sum>
        </package>
        <package name="avahi-devel" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-devel-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">7f31ffcb016545f8d2acca7253735e149d55ee6be25665147a9c7018f3937811</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">9f5fd47f9766934d55cda126cfd72d3c7efeb9ced9a30f7cf4e796307fef0f07</sum>
        </package>
        <package name="avahi-glib-devel" version="0.7" release="21.el8" epoch="0" arch="s390x" src="avahi-0.7-21.el8.src.rpm">
          <filename>avahi-glib-devel-0.7-21.el8.s390x.rpm</filename>
          <sum type="sha256">eb592940d5af2aa5fc6c3ea57fca31e0d393b43ffe4a0e04669b8e81448c5e69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7254</id>
    <title>Moderate: dotnet8.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:18:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7254" id="RHSA-2023:7254" type="rhsa" title="RHSA-2023:7254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7254.html" id="ALSA-2023:7254" type="self" title="ALSA-2023:7254"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.100" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.100-2.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.100-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">8010137cda18d28ddc02247a1a24a0f41bdfdd3f6a6fe89a55c0aefc10ba7da4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7256</id>
    <title>Moderate: dotnet7.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:18:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.114 and .NET Runtime 7.0.14.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7256" id="RHSA-2023:7256" type="rhsa" title="RHSA-2023:7256"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7256.html" id="ALSA-2023:7256" type="self" title="ALSA-2023:7256"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.114" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.114-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.114-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">8c2bad768e3192cae6a77c5cbd8b86663f8b1560a35fb53e0140bab5a21f3d3a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7258</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2023-11-15 00:00:00"/>
    <updated date="2023-11-23 10:18:55"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.125 and .NET Runtime 6.0.25.

Security Fix(es):

* dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)
* dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7258" id="RHSA-2023:7258" type="rhsa" title="RHSA-2023:7258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36049" id="CVE-2023-36049" type="cve" title="CVE-2023-36049"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-36558" id="CVE-2023-36558" type="cve" title="CVE-2023-36558"/>
      <reference href="https://bugzilla.redhat.com/2247750" id="2247750" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2248883" id="2248883" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7258.html" id="ALSA-2023:7258" type="self" title="ALSA-2023:7258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.125" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.125-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.125-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">500a9caac457631c44bd142ff94a6983088278352fbc29f6fd88c24d7ebd19d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="1">
    <id>ALSA-2023:7467</id>
    <title>Moderate: samba security update</title>
    <issued date="2023-11-22 00:00:00"/>
    <updated date="2023-11-24 10:04:16"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

* samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)
* samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)
* samba: "rpcecho" development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7467" id="RHSA-2023:7467" type="rhsa" title="RHSA-2023:7467"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3961" id="CVE-2023-3961" type="cve" title="CVE-2023-3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4091" id="CVE-2023-4091" type="cve" title="CVE-2023-4091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-42669" id="CVE-2023-42669" type="cve" title="CVE-2023-42669"/>
      <reference href="https://bugzilla.redhat.com/2241881" id="2241881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241882" id="2241882" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2241884" id="2241884" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7467.html" id="ALSA-2023:7467" type="self" title="ALSA-2023:7467"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="libwbclient-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>libwbclient-devel-4.18.6-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">71eaec1405e558c9eb75dd6a589c775e438ea6cb6dd720f07b091cca806ff72d</sum>
        </package>
        <package name="libnetapi-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>libnetapi-devel-4.18.6-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">780d59f1b461e9f62553c072cc4f0796f7bb5b6c6548a228d3ebd2c27d5d55f8</sum>
        </package>
        <package name="libsmbclient-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>libsmbclient-devel-4.18.6-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">84ea721535ec09942fc7b80240aae59a37144c8ef6cedd278c1bce07a4a9b15d</sum>
        </package>
        <package name="python3-samba-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>python3-samba-devel-4.18.6-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">971a483e0e25662c171e9d46015a5f7631e255c065f2df91776237d9fb99f57b</sum>
        </package>
        <package name="samba-devel" version="4.18.6" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="samba-4.18.6-2.el8_9.alma.1.src.rpm">
          <filename>samba-devel-4.18.6-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">a039a3c9670b5ed6863871d5f8343a366e6f177177b55146ffe99a7516e4b945</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7836</id>
    <title>Moderate: avahi security update</title>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-15 09:22:29"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>avahi security update</summary>
    <description>Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other people to chat with, view printers to print with, and find shared files on other computers.

Security Fix(es):

* avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket (CVE-2021-3468)
* avahi: Reachable assertion in avahi_dns_packet_append_record (CVE-2023-38469)
* avahi: Reachable assertion in avahi_escape_label (CVE-2023-38470)
* avahi: Reachable assertion in dbus_set_host_name (CVE-2023-38471)
* avahi: Reachable assertion in avahi_rdata_parse (CVE-2023-38472)
* avahi: Reachable assertion in avahi_alternative_host_name (CVE-2023-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7836" id="RHSA-2023:7836" type="rhsa" title="RHSA-2023:7836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2021-3468" id="CVE-2021-3468" type="cve" title="CVE-2021-3468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38469" id="CVE-2023-38469" type="cve" title="CVE-2023-38469"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38470" id="CVE-2023-38470" type="cve" title="CVE-2023-38470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38471" id="CVE-2023-38471" type="cve" title="CVE-2023-38471"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38472" id="CVE-2023-38472" type="cve" title="CVE-2023-38472"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-38473" id="CVE-2023-38473" type="cve" title="CVE-2023-38473"/>
      <reference href="https://bugzilla.redhat.com/1939614" id="1939614" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191687" id="2191687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191690" id="2191690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191691" id="2191691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191692" id="2191692" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2191694" id="2191694" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7836.html" id="ALSA-2023:7836" type="self" title="ALSA-2023:7836"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="avahi-glib-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-glib-devel-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">1b0d50e0a8b6927f1c49e0adc0c7de025ca668692b8639a70cea2f30316593b3</sum>
        </package>
        <package name="avahi-compat-howl" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-howl-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">69ed64a40b22ae4be955beec32cdf3630a7693d33b06accbf44cf3d8236d68f0</sum>
        </package>
        <package name="avahi-gobject-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-gobject-devel-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">6b0ca721ab834aa94e6c22153f0b320b1666e1c36bb7efcac036315f0fa4eaa8</sum>
        </package>
        <package name="avahi-compat-libdns_sd" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-libdns_sd-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">6d2f567ef710e5e6e08f4f5e3ef047e083610d07fb99a4668f79ed6ed4f4e7d6</sum>
        </package>
        <package name="avahi-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-devel-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">7ba04e967ce0ce56169161475cae6c0880155e6bd9ea89bf6cad8af6a52f2173</sum>
        </package>
        <package name="avahi-ui-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-ui-devel-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">9b9122d002540ee161bf8f9668a50761ca13fc9b204739c31fff45dd2dafa665</sum>
        </package>
        <package name="avahi-compat-libdns_sd-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-libdns_sd-devel-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">b1b1b10dc40c0531a6b9db1bd91bdd5163f0e3d960d2ab9a35945e8c4327943f</sum>
        </package>
        <package name="avahi-compat-howl-devel" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-compat-howl-devel-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">bed5b57f4c6b92738f992115c41d9e19a22c8049aca5c8b37c3c99ebc6f6dab2</sum>
        </package>
        <package name="avahi-ui" version="0.7" release="21.el8_9.1" epoch="0" arch="s390x" src="avahi-0.7-21.el8_9.1.src.rpm">
          <filename>avahi-ui-0.7-21.el8_9.1.s390x.rpm</filename>
          <sum type="sha256">f2d67e5c3fcdc12a2b471b28a215e62fde42d5f06e3f739d66ed028dbd7e6eca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2023:7841</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2023-12-14 00:00:00"/>
    <updated date="2023-12-15 09:13:53"/>
    <rights>Copyright 2023 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer: MXF demuxer use-after-free vulnerability (CVE-2023-44446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2023:7841" id="RHSA-2023:7841" type="rhsa" title="RHSA-2023:7841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44446" id="CVE-2023-44446" type="cve" title="CVE-2023-44446"/>
      <reference href="https://bugzilla.redhat.com/2250249" id="2250249" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2023-7841.html" id="ALSA-2023:7841" type="self" title="ALSA-2023:7841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="2.el8_9.alma.1" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-2.el8_9.alma.1.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-2.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">c646c890fa6c81f12730e818e92028c1e73fb39e45b07ab4c1a35ddc802bf41d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0150</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 20:16:00"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.101 and .NET Runtime 8.0.1.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0150" id="RHSA-2024:0150" type="rhsa" title="RHSA-2024:0150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0150.html" id="ALSA-2024:0150" type="self" title="ALSA-2024:0150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.101" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.101-1.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.101-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">3eaf93b2a01d6d51b3201644265aed3f9787f27717012b5425885f342a3479a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0157</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 19:01:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.115 and .NET Runtime 7.0.15.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0157" id="RHSA-2024:0157" type="rhsa" title="RHSA-2024:0157"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0157.html" id="ALSA-2024:0157" type="self" title="ALSA-2024:0157"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.115" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.115-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">cca629821acbb550afd88d684dbbedb415a18c97625d91fad431cdf41f972857</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0158</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-01-10 00:00:00"/>
    <updated date="2024-01-11 18:37:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.126 and .NET Runtime 6.0.26.

Security Fix(es):

* dotnet: Information Disclosure: MD.SqlClient(MDS) &amp; System.data.SQLClient (SDS) (CVE-2024-0056)
* dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)
* dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0158" id="RHSA-2024:0158" type="rhsa" title="RHSA-2024:0158"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0056" id="CVE-2024-0056" type="cve" title="CVE-2024-0056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0057" id="CVE-2024-0057" type="cve" title="CVE-2024-0057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21319" id="CVE-2024-21319" type="cve" title="CVE-2024-21319"/>
      <reference href="https://bugzilla.redhat.com/2255384" id="2255384" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2255386" id="2255386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257566" id="2257566" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0158.html" id="ALSA-2024:0158" type="self" title="ALSA-2024:0158"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.126" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.126-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.126-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">83c9a5cbfd3f1a69b7235c59133adc6059f487e4a902df3c9b5dd5aeac71fa0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0248</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-01-17 00:00:00"/>
    <updated date="2024-01-20 11:28:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
* OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
* OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
* OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
* OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0248" id="RHSA-2024:0248" type="rhsa" title="RHSA-2024:0248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20918" id="CVE-2024-20918" type="cve" title="CVE-2024-20918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20919" id="CVE-2024-20919" type="cve" title="CVE-2024-20919"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20921" id="CVE-2024-20921" type="cve" title="CVE-2024-20921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20945" id="CVE-2024-20945" type="cve" title="CVE-2024-20945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-20952" id="CVE-2024-20952" type="cve" title="CVE-2024-20952"/>
      <reference href="https://bugzilla.redhat.com/2257728" id="2257728" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257837" id="2257837" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257853" id="2257853" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257859" id="2257859" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257874" id="2257874" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0248.html" id="ALSA-2024:0248" type="self" title="ALSA-2024:0248"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="java-21-openjdk-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">204283f0666caa098d2568eb12e526f785052706deb1ae4fa3db9630b41dcbd3</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">2086ac82b53ef35cb01d7ea9bf1a94cff9475126861afcf4316b7cddff4ecd88</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">24adf67a211a8d1affc456d7f93f1ae7e1380bc69aa67b7331f8f1d3aed1350b</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">3da3bc65e3c5864c342441b4af73ebfc322facce772af4e7656e923db5661c0f</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">58b3eedeb1b32ff9af3606b8fe40ec32d7e583eca10e332a1aa3be3539cbf0a5</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8ef374960a40766efba091d008f08fd7ea6a48185851328476d0ae5e9c220ead</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.2.0.13" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.2.0.13-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.2.0.13-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">959c4972b28c164c036f625313040164fd5734b1e8de1278fa4ce6e75a97d097</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0806</id>
    <title>Important: dotnet7.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 10:05:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.116 and .NET Runtime 7.0.16.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0806" id="RHSA-2024:0806" type="rhsa" title="RHSA-2024:0806"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0806.html" id="ALSA-2024:0806" type="self" title="ALSA-2024:0806"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.116" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.116-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.116-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">3ff0a38c76c7901dfc87cbce9503fbac14e11b78bd5c37bbcd20f35b7c8148ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0808</id>
    <title>Important: dotnet6.0 security update</title>
    <issued date="2024-02-13 00:00:00"/>
    <updated date="2024-02-15 09:08:17"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0808" id="RHSA-2024:0808" type="rhsa" title="RHSA-2024:0808"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0808.html" id="ALSA-2024:0808" type="self" title="ALSA-2024:0808"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.127" release="1.el8_9" epoch="0" arch="s390x" src="dotnet6.0-6.0.127-1.el8_9.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.127-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">a49433b5f079b86ebfd651460868514ede8fe796ecf72bb2e8acb98c842c4c09</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0827</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-02-15 00:00:00"/>
    <updated date="2024-02-16 10:14:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.102 and .NET Runtime 8.0.2.

Security Fix(es):

* dotnet: Denial of Service in SignalR server (CVE-2024-21386)
* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0827" id="RHSA-2024:0827" type="rhsa" title="RHSA-2024:0827"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21386" id="CVE-2024-21386" type="cve" title="CVE-2024-21386"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21404" id="CVE-2024-21404" type="cve" title="CVE-2024-21404"/>
      <reference href="https://bugzilla.redhat.com/2263085" id="2263085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263086" id="2263086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0827.html" id="ALSA-2024:0827" type="self" title="ALSA-2024:0827"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.102" release="2.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.102-2.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.102-2.el8_9.s390x.rpm</filename>
          <sum type="sha256">3f62d2dfbd45e654150444166aae4d48d6616d635b986d546132c76d09749d36</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0889</id>
    <title>Moderate: oniguruma security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:31:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>oniguruma security update</summary>
    <description>Oniguruma is a regular expressions library that supports a variety of character encodings. 

Security Fix(es):

* oniguruma: Use-after-free in onig_new_deluxe() in regext.c (CVE-2019-13224)
* oniguruma: Stack exhaustion in regcomp.c because of recursion in regparse.c (CVE-2019-16163)
* oniguruma: integer overflow in search_in_range function in regexec.c leads to out-of-bounds read (CVE-2019-19012)
* oniguruma: Heap-based buffer over-read in function gb18030_mbc_enc_len in file gb18030.c (CVE-2019-19203)
* oniguruma: Heap-based buffer over-read in function fetch_interval_quantifier in regparse.c (CVE-2019-19204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0889" id="RHSA-2024:0889" type="rhsa" title="RHSA-2024:0889"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-13224" id="CVE-2019-13224" type="cve" title="CVE-2019-13224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-16163" id="CVE-2019-16163" type="cve" title="CVE-2019-16163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19012" id="CVE-2019-19012" type="cve" title="CVE-2019-19012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19203" id="CVE-2019-19203" type="cve" title="CVE-2019-19203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-19204" id="CVE-2019-19204" type="cve" title="CVE-2019-19204"/>
      <reference href="https://bugzilla.redhat.com/1728970" id="1728970" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1768997" id="1768997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802051" id="1802051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802061" id="1802061" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/1802068" id="1802068" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0889.html" id="ALSA-2024:0889" type="self" title="ALSA-2024:0889"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="oniguruma-devel" version="6.8.2" release="2.1.el8_9" epoch="0" arch="s390x" src="oniguruma-6.8.2-2.1.el8_9.src.rpm">
          <filename>oniguruma-devel-6.8.2-2.1.el8_9.s390x.rpm</filename>
          <sum type="sha256">8778661eb34018d0632063a91da81c6d50aa7fd526604f247e0d994bd3c29e69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:0893</id>
    <title>Important: python-pillow security update</title>
    <issued date="2024-02-20 00:00:00"/>
    <updated date="2024-02-22 19:24:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* pillow: Arbitrary Code Execution via the environment parameter (CVE-2023-50447)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:0893" id="RHSA-2024:0893" type="rhsa" title="RHSA-2024:0893"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50447" id="CVE-2023-50447" type="cve" title="CVE-2023-50447"/>
      <reference href="https://bugzilla.redhat.com/2259479" id="2259479" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-0893.html" id="ALSA-2024:0893" type="self" title="ALSA-2024:0893"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="python3-pillow-tk" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="s390x" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-tk-5.1.1-18.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">6682e0abeda59085642da0082d5e38ca13ff02469292fb94e418a4c9fd79fcbc</sum>
        </package>
        <package name="python3-pillow-doc" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="noarch" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-doc-5.1.1-18.el8_9.1.alma.1.noarch.rpm</filename>
          <sum type="sha256">7905756e31e07345223207d9bc7cedca64e16151b80b7e0a33957feb18f2eee1</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="18.el8_9.1.alma.1" epoch="0" arch="s390x" src="python-pillow-5.1.1-18.el8_9.1.alma.1.src.rpm">
          <filename>python3-pillow-devel-5.1.1-18.el8_9.1.alma.1.s390x.rpm</filename>
          <sum type="sha256">f0a603f1dbe0b8bd5de3aa0dc881a994a6a9bcccf85cdb2f87ef2187d37beab3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10979</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:43:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10979" id="RHSA-2024:10979" type="rhsa" title="RHSA-2024:10979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10979.html" id="ALSA-2024:10979" type="self" title="ALSA-2024:10979"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-idle" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">140d86ead003c72177f394548e0088e40ddf33bda820e9f6d3116ba395358c9b</sum>
        </package>
        <package name="python3.11-test" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">22ecbf21c1a134799331c608d3e39442cbcb3299d2f8eabcff19605f325e123c</sum>
        </package>
        <package name="python3.11-debug" version="3.11.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.11-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c1ac516059342143ad86677adf18a01d762c087dff1fc7611619462ed1e37466</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:10980</id>
    <title>Important: python3.12 security update</title>
    <issued date="2024-12-12 00:00:00"/>
    <updated date="2024-12-16 14:40:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Unbounded memory buffering in SelectorSocketTransport.writelines() (CVE-2024-12254)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:10980" id="RHSA-2024:10980" type="rhsa" title="RHSA-2024:10980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12254" id="CVE-2024-12254" type="cve" title="CVE-2024-12254"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2330804" id="2330804" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-10980.html" id="ALSA-2024:10980" type="self" title="ALSA-2024:10980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-debug" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">727cabcfe3f5dc4a391b1c38c59f1504cf97a3fd06363944802caed27989a841</sum>
        </package>
        <package name="python3.12-test" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c3ee75bf27434da0bd82821e00cdb8c53bd4636f1f71159c7c0c88dcbf5abd37</sum>
        </package>
        <package name="python3.12-idle" version="3.12.8" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.8-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.8-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ef864c376c894aa2608430f90b945e1dbb202fc658a60870ddd3a85a139cbb1a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11154</id>
    <title>Moderate: bluez security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:53:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution (CVE-2023-45866)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11154" id="RHSA-2024:11154" type="rhsa" title="RHSA-2024:11154"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-45866" id="CVE-2023-45866" type="cve" title="CVE-2023-45866"/>
      <reference href="https://bugzilla.redhat.com/2253391" id="2253391" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11154.html" id="ALSA-2024:11154" type="self" title="ALSA-2024:11154"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bluez-libs-devel" version="5.63" release="3.el8_10.alma.1" epoch="0" arch="s390x" src="bluez-5.63-3.el8_10.alma.1.src.rpm">
          <filename>bluez-libs-devel-5.63-3.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">14e3f973993831e649e8084e94cf57be424cd78d6a9fdda757f0ce3fdbbeed3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11192</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:44:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11192" id="RHSA-2024:11192" type="rhsa" title="RHSA-2024:11192"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-50612" id="CVE-2024-50612" type="cve" title="CVE-2024-50612"/>
      <reference href="https://bugzilla.redhat.com/2322057" id="2322057" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11192.html" id="ALSA-2024:11192" type="self" title="ALSA-2024:11192"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libsndfile-devel" version="1.0.28" release="16.el8_10" epoch="0" arch="s390x" src="libsndfile-1.0.28-16.el8_10.src.rpm">
          <filename>libsndfile-devel-1.0.28-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f1676944f305189ca719f9d7794d4c08aa3153b51e852c8cddb8565936f8f1b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:11193</id>
    <title>Moderate: mpg123 security update</title>
    <issued date="2024-12-17 00:00:00"/>
    <updated date="2024-12-18 12:42:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>mpg123 security update</summary>
    <description>The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2, and 3 (most commonly MPEG 1.0 layer 3 also known as MP3), as well as re-usable decoding and output libraries.  

Security Fix(es):  

  * mpg123: Buffer overflow when writing decoded PCM samples (CVE-2024-10573)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:11193" id="RHSA-2024:11193" type="rhsa" title="RHSA-2024:11193"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-10573" id="CVE-2024-10573" type="cve" title="CVE-2024-10573"/>
      <reference href="https://bugzilla.redhat.com/2322980" id="2322980" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-11193.html" id="ALSA-2024:11193" type="self" title="ALSA-2024:11193"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mpg123-devel" version="1.32.9" release="1.el8_10" epoch="0" arch="s390x" src="mpg123-1.32.9-1.el8_10.src.rpm">
          <filename>mpg123-devel-1.32.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6d2c956e6da9aa7dd721c6fc554d4b97c804939e7a7ab92799556b1c13d32688</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1308</id>
    <title>Moderate: .NET 7.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:56:33"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.117 and .NET Runtime 7.0.17.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1308" id="RHSA-2024:1308" type="rhsa" title="RHSA-2024:1308"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1308.html" id="ALSA-2024:1308" type="self" title="ALSA-2024:1308"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.117" release="1.el8_9" epoch="0" arch="s390x" src="dotnet7.0-7.0.117-1.el8_9.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.117-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">0cd2bbf5663e284aeea40a2d17748c703f78b74021e9062cb0740db76b6abd02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1311</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-03-13 00:00:00"/>
    <updated date="2024-03-14 09:41:22"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.103 and .NET Runtime 8.0.3.

Security Fix(es):

* dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1311" id="RHSA-2024:1311" type="rhsa" title="RHSA-2024:1311"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21392" id="CVE-2024-21392" type="cve" title="CVE-2024-21392"/>
      <reference href="https://bugzilla.redhat.com/2268266" id="2268266" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1311.html" id="ALSA-2024:1311" type="self" title="ALSA-2024:1311"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.103" release="1.el8_9" epoch="0" arch="s390x" src="dotnet8.0-8.0.103-1.el8_9.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.103-1.el8_9.s390x.rpm</filename>
          <sum type="sha256">b38f4fb932c6d72c472c32665efcd1ac5e53492f47fcb2e53a74fedf0302bd42</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1608</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2024-04-02 00:00:00"/>
    <updated date="2024-04-03 18:46:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.

Security Fix(es):

* opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) (CVE-2024-0914)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1608" id="RHSA-2024:1608" type="rhsa" title="RHSA-2024:1608"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0914" id="CVE-2024-0914" type="cve" title="CVE-2024-0914"/>
      <reference href="https://bugzilla.redhat.com/2260407" id="2260407" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1608.html" id="ALSA-2024:1608" type="self" title="ALSA-2024:1608"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="opencryptoki-devel" version="3.21.0" release="10.el8_9.alma.1" epoch="0" arch="s390x" src="opencryptoki-3.21.0-10.el8_9.alma.1.src.rpm">
          <filename>opencryptoki-devel-3.21.0-10.el8_9.alma.1.s390x.rpm</filename>
          <sum type="sha256">30a993a7820a5ba32c7d3601cee4419eaf669174b9f15f4414e481de16fb4224</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1781</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2024-04-11 00:00:00"/>
    <updated date="2024-04-12 18:44:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)
* bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
* bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
* bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1781" id="RHSA-2024:1781" type="rhsa" title="RHSA-2024:1781"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-4408" id="CVE-2023-4408" type="cve" title="CVE-2023-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50387" id="CVE-2023-50387" type="cve" title="CVE-2023-50387"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-50868" id="CVE-2023-50868" type="cve" title="CVE-2023-50868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5517" id="CVE-2023-5517" type="cve" title="CVE-2023-5517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5679" id="CVE-2023-5679" type="cve" title="CVE-2023-5679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6516" id="CVE-2023-6516" type="cve" title="CVE-2023-6516"/>
      <reference href="https://bugzilla.redhat.com/2263896" id="2263896" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263897" id="2263897" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263909" id="2263909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263911" id="2263911" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263914" id="2263914" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2263917" id="2263917" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1781.html" id="ALSA-2024:1781" type="self" title="ALSA-2024:1781"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="bind9.16-dnssec-utils" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-dnssec-utils-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">3ae7cba7075fa3c1f18f523eb34add46779c79ef621b39b660cc759328de30d8</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.16.el8_9.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">4e921c16c9bc370a4cd96b878ead640cf36106e8a3d902ffcef8e7619a6e4f64</sum>
        </package>
        <package name="python3-bind9.16" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>python3-bind9.16-9.16.23-0.16.el8_9.2.alma.1.noarch.rpm</filename>
          <sum type="sha256">9aa0b5ce2ad36cee36344a56133c6e27f97c17ea6a46cd6cfeac1bc0c87e24e4</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.16.el8_9.2.alma.1" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.16.el8_9.2.alma.1.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.16.el8_9.2.alma.1.s390x.rpm</filename>
          <sum type="sha256">f291a225db689d7e75d3c4263c57bdb5c0c911a73586af7d795db1129516a795</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:1825</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-04-18 00:00:00"/>
    <updated date="2024-04-18 13:46:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
* OpenJDK: C2 compilation fails with "Exceeded _node_regs array" (8317507) (CVE-2024-21094)
* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:1825" id="RHSA-2024:1825" type="rhsa" title="RHSA-2024:1825"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21011" id="CVE-2024-21011" type="cve" title="CVE-2024-21011"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21012" id="CVE-2024-21012" type="cve" title="CVE-2024-21012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21068" id="CVE-2024-21068" type="cve" title="CVE-2024-21068"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21094" id="CVE-2024-21094" type="cve" title="CVE-2024-21094"/>
      <reference href="https://bugzilla.redhat.com/2274975" id="2274975" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2274977" id="2274977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275003" id="2275003" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2275005" id="2275005" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-1825.html" id="ALSA-2024:1825" type="self" title="ALSA-2024:1825"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">0662028e34bd76849f9837d426de52dd21188f35e219068aa1f1ebc42328a203</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">267cc2520f460036bd692e3ed4f4b3d80e4d596e755e0db7a17c0d154a761bfc</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">84bcc79ad2f3278c09d689ca69b78aab365331b2917864fad717f642b3be8955</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">8dcd0fba2e8df92f20bdbd2d66e29cbb3fa9423501ea8079255ea6de0c3f8707</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">91b63b9016d3142f74c7b5c7cbe1b7c1ed59497adaf682aa3289b965b34b39bc</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">aa674f9ae68a1b00f0084d7f043ebb954ee936fd5628ca74b84237f0b2c49f59</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.11.0.9" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.11.0.9-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.11.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">ff1a1610eaee2d7c43ffd117ba24a384fdbf8d1bf18e4372bed31774e011968e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2722</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-07 00:00:00"/>
    <updated date="2024-05-09 12:08:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2722" id="RHSA-2024:2722" type="rhsa" title="RHSA-2024:2722"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2722.html" id="ALSA-2024:2722" type="self" title="ALSA-2024:2722"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="glibc-benchtests" version="2.28" release="236.el8_9.13" epoch="0" arch="s390x" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-benchtests-2.28-236.el8_9.13.s390x.rpm</filename>
          <sum type="sha256">5175812b910d977ee7204d2316895a9b1e9dfd79fa8b2b3e59e5567e33984bdd</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="236.el8_9.13" epoch="0" arch="s390x" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-nss-devel-2.28-236.el8_9.13.s390x.rpm</filename>
          <sum type="sha256">5750e669f2dc48e02d4f9213e0c7ca232a45d79605827fe00913afdb0d7ae039</sum>
        </package>
        <package name="glibc-static" version="2.28" release="236.el8_9.13" epoch="0" arch="s390x" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>glibc-static-2.28-236.el8_9.13.s390x.rpm</filename>
          <sum type="sha256">c3ac2c243a879e985a5ee9669c998374908e6f083d4a96586b028862075485cc</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="236.el8_9.13" epoch="0" arch="s390x" src="glibc-2.28-236.el8_9.13.src.rpm">
          <filename>nss_hesiod-2.28-236.el8_9.13.s390x.rpm</filename>
          <sum type="sha256">f3aa3c7a2f86d9549d421a734a9477c774aea958c4b36fa071104ce50e9cc5cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2966</id>
    <title>Low: ghostscript security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:11"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: Divide by zero in eps_print_page in gdevepsn.c (CVE-2020-21710)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2966" id="RHSA-2024:2966" type="rhsa" title="RHSA-2024:2966"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-21710" id="CVE-2020-21710" type="cve" title="CVE-2020-21710"/>
      <reference href="https://bugzilla.redhat.com/2235001" id="2235001" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2966.html" id="ALSA-2024:2966" type="self" title="ALSA-2024:2966"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="ghostscript-tools-fonts" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">1b7ce805066d97c3b361ca2c4b6404afd2019da635694973d87dddf29e780227</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-tools-printing-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">4afd62427eced55ce49531bec21b69b2a30f82ffe9178f38eee183174a37b003</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">4cdba7d1d15039d867b5b2fde4b2a2bac7a2da758a393fa75973c50f848f19a9</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="12.el8" epoch="0" arch="s390x" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>libgs-devel-9.27-12.el8.s390x.rpm</filename>
          <sum type="sha256">5a3921f2ac13f1cb3e5b5932586532c84574c05be4405cdb81307a3c1532513b</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="12.el8" epoch="0" arch="noarch" src="ghostscript-9.27-12.el8.src.rpm">
          <filename>ghostscript-doc-9.27-12.el8.noarch.rpm</filename>
          <sum type="sha256">ec96699116e45963779afab6f3fd5a2b3d356359af86f11461c8ab3ba9219ca4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2979</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:45:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: NULL pointer dereference in `FoFiType1C::convertToType1` (CVE-2020-36024)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2979" id="RHSA-2024:2979" type="rhsa" title="RHSA-2024:2979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-36024" id="CVE-2020-36024" type="cve" title="CVE-2020-36024"/>
      <reference href="https://bugzilla.redhat.com/2231520" id="2231520" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2979.html" id="ALSA-2024:2979" type="self" title="ALSA-2024:2979"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="poppler-cpp-devel" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">02705f7393a33a2ecdd10d722a0d6ce258ed22b53958cf9f53e9a7c51eacc0a0</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">34d992b17ccc508dadf13593716c8a499e03bcd25236b99cacd87d99772e9eb1</sum>
        </package>
        <package name="poppler-glib-doc" version="20.11.0" release="11.el8" epoch="0" arch="noarch" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-glib-doc-20.11.0-11.el8.noarch.rpm</filename>
          <sum type="sha256">a88c0715ddece32f14d096585e9f3d9440404392a6958b95d633054e08ae973f</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-cpp-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">adbc93634dde5cca9861d2edf5c593159aca924a6311a50d9230ea36e21afc85</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-devel-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">b1e79186b7371d34b921941430c348c063de1f50818c03ad0ff242875fd5e027</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="11.el8" epoch="0" arch="s390x" src="poppler-20.11.0-11.el8.src.rpm">
          <filename>poppler-glib-devel-20.11.0-11.el8.s390x.rpm</filename>
          <sum type="sha256">d17ed2c1bed0df7b26ef6b1b1163e729657fa3a51f6e542fcb41127060ab22c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2985</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:42:16"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
* python-cryptography: memory corruption via immutable objects (CVE-2023-23931)
* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)
* python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2985" id="RHSA-2024:2985" type="rhsa" title="RHSA-2024:2985"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-40897" id="CVE-2022-40897" type="cve" title="CVE-2022-40897"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-23931" id="CVE-2023-23931" type="cve" title="CVE-2023-23931"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-43804" id="CVE-2023-43804" type="cve" title="CVE-2023-43804"/>
      <reference href="https://bugzilla.redhat.com/2158559" id="2158559" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2171817" id="2171817" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2242493" id="2242493" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2985.html" id="ALSA-2024:2985" type="self" title="ALSA-2024:2985"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <module name="python39" stream="3.9" version="8100020240407120707" context="0a5380d9" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-debug" version="3.9.18" release="3.module_el8.10.0+3765+2f9a457d" epoch="0" arch="s390x" src="python39-3.9.18-3.module_el8.10.0+3765+2f9a457d.src.rpm">
          <filename>python39-debug-3.9.18-3.module_el8.10.0+3765+2f9a457d.s390x.rpm</filename>
          <sum type="sha256">b7a61aa6bd9a88ee03a2cc5c089ea412954e539a8fdba5e8153b6a07ffa28ce8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:2995</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:20:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)
* xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (CVE-2023-6377)
* xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (CVE-2023-6478)
* xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access (CVE-2024-0229)
* xorg-x11-server: SELinux unlabeled GLX PBuffer (CVE-2024-0408)
* xorg-x11-server: SELinux context corruption (CVE-2024-0409)
* xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent (CVE-2024-21885)
* xorg-x11-server: heap buffer overflow in DisableDevice (CVE-2024-21886)
* xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:2995" id="RHSA-2024:2995" type="rhsa" title="RHSA-2024:2995"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5367" id="CVE-2023-5367" type="cve" title="CVE-2023-5367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-5380" id="CVE-2023-5380" type="cve" title="CVE-2023-5380"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6377" id="CVE-2023-6377" type="cve" title="CVE-2023-6377"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6478" id="CVE-2023-6478" type="cve" title="CVE-2023-6478"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0229" id="CVE-2024-0229" type="cve" title="CVE-2024-0229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0408" id="CVE-2024-0408" type="cve" title="CVE-2024-0408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0409" id="CVE-2024-0409" type="cve" title="CVE-2024-0409"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21885" id="CVE-2024-21885" type="cve" title="CVE-2024-21885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21886" id="CVE-2024-21886" type="cve" title="CVE-2024-21886"/>
      <reference href="https://bugzilla.redhat.com/2243091" id="2243091" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2244736" id="2244736" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253291" id="2253291" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253298" id="2253298" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256540" id="2256540" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256542" id="2256542" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2256690" id="2256690" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257689" id="2257689" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2257690" id="2257690" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-2995.html" id="ALSA-2024:2995" type="self" title="ALSA-2024:2995"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="22.el8" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-22.el8.noarch.rpm</filename>
          <sum type="sha256">d9e3688317f11fecbde68151cfa0b30b79f3ea6a4b9bd877ac51cf2aae410829</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="22.el8" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-22.el8.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-22.el8.s390x.rpm</filename>
          <sum type="sha256">db19569844e05ffbf6a42765b1c17ff155b17e7a66aafa7f238dff4297e14501</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3005</id>
    <title>Moderate: python-pillow security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:44:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (CVE-2023-44271)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3005" id="RHSA-2024:3005" type="rhsa" title="RHSA-2024:3005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-44271" id="CVE-2023-44271" type="cve" title="CVE-2023-44271"/>
      <reference href="https://bugzilla.redhat.com/2247820" id="2247820" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3005.html" id="ALSA-2024:3005" type="self" title="ALSA-2024:3005"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="python3-pillow-tk" version="5.1.1" release="20.el8" epoch="0" arch="s390x" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-tk-5.1.1-20.el8.s390x.rpm</filename>
          <sum type="sha256">2b5d89efe8f33d7f2c1084a626bd7a88d1e537a647afd5f8620645195d8485b6</sum>
        </package>
        <package name="python3-pillow-doc" version="5.1.1" release="20.el8" epoch="0" arch="noarch" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-doc-5.1.1-20.el8.noarch.rpm</filename>
          <sum type="sha256">87ed7f6dcb6fab004a9a9a7b3362d9ae596f2240b983e6ed92115e7dc2bcc5a9</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="20.el8" epoch="0" arch="s390x" src="python-pillow-5.1.1-20.el8.src.rpm">
          <filename>python3-pillow-devel-5.1.1-20.el8.s390x.rpm</filename>
          <sum type="sha256">a1cd5ce56f2333fab7815211f0a1ae77773e07058d636352c825b32a392bfa53</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3008</id>
    <title>Important: pmix security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>pmix security update</summary>
    <description>The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters up to and including exascale sizes.

Security Fix(es):

* pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3008" id="RHSA-2024:3008" type="rhsa" title="RHSA-2024:3008"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-41915" id="CVE-2023-41915" type="cve" title="CVE-2023-41915"/>
      <reference href="https://bugzilla.redhat.com/2238898" id="2238898" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3008.html" id="ALSA-2024:3008" type="self" title="ALSA-2024:3008"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="pmix-devel" version="2.2.5" release="3.el8" epoch="0" arch="s390x" src="pmix-2.2.5-3.el8.src.rpm">
          <filename>pmix-devel-2.2.5-3.el8.s390x.rpm</filename>
          <sum type="sha256">6672e5f643f48b76e58bb592e193327ca8d15feec02fa4064afaa6bcef439d46</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3030</id>
    <title>Moderate: libsndfile security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:36"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. 

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3030" id="RHSA-2024:3030" type="rhsa" title="RHSA-2024:3030"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-33065" id="CVE-2022-33065" type="cve" title="CVE-2022-33065"/>
      <reference href="https://bugzilla.redhat.com/2238934" id="2238934" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3030.html" id="ALSA-2024:3030" type="self" title="ALSA-2024:3030"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="libsndfile-devel" version="1.0.28" release="14.el8" epoch="0" arch="s390x" src="libsndfile-1.0.28-14.el8.src.rpm">
          <filename>libsndfile-devel-1.0.28-14.el8.s390x.rpm</filename>
          <sum type="sha256">5585ee50da3d2cdfbc377fd57760d9f116e186601f765a180c8da342cb30ce71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3056</id>
    <title>Moderate: qt5-qtbase security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714)
* qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3056" id="RHSA-2024:3056" type="rhsa" title="RHSA-2024:3056"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51714" id="CVE-2023-51714" type="cve" title="CVE-2023-51714"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25580" id="CVE-2024-25580" type="cve" title="CVE-2024-25580"/>
      <reference href="https://bugzilla.redhat.com/2255856" id="2255856" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2264423" id="2264423" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3056.html" id="ALSA-2024:3056" type="self" title="ALSA-2024:3056"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="qt5-qtbase-static" version="5.15.3" release="7.el8" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-7.el8.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-7.el8.s390x.rpm</filename>
          <sum type="sha256">71c159be93647fa85242db529ed32dbb10abdd2d330e8f35d8060b528ace2bdd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3059</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3059" id="RHSA-2024:3059" type="rhsa" title="RHSA-2024:3059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-4645" id="CVE-2022-4645" type="cve" title="CVE-2022-4645"/>
      <reference href="https://bugzilla.redhat.com/2176220" id="2176220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3059.html" id="ALSA-2024:3059" type="self" title="ALSA-2024:3059"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="libtiff-tools" version="4.0.9" release="31.el8" epoch="0" arch="s390x" src="libtiff-4.0.9-31.el8.src.rpm">
          <filename>libtiff-tools-4.0.9-31.el8.s390x.rpm</filename>
          <sum type="sha256">769e2b2a2364dcf08985b31cc5e760baca9ba9ce44d64d33087dd86a8edd1e9c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3060</id>
    <title>Moderate: gstreamer1-plugins-bad-free security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:38"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.

Security Fix(es):

* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video (CVE-2023-40474)
* gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio (CVE-2023-40475)
* gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite (CVE-2023-40476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3060" id="RHSA-2024:3060" type="rhsa" title="RHSA-2024:3060"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40474" id="CVE-2023-40474" type="cve" title="CVE-2023-40474"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40475" id="CVE-2023-40475" type="cve" title="CVE-2023-40475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-40476" id="CVE-2023-40476" type="cve" title="CVE-2023-40476"/>
      <reference href="https://bugzilla.redhat.com/2254587" id="2254587" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254588" id="2254588" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2254589" id="2254589" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3060.html" id="ALSA-2024:3060" type="self" title="ALSA-2024:3060"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="4.el8" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-4.el8.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-4.el8.s390x.rpm</filename>
          <sum type="sha256">b81aa7a4d7991e37a13b93c644793f15d0b0c887988c374ff04d022fee84607d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3062</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:40:58"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3062" id="RHSA-2024:3062" type="rhsa" title="RHSA-2024:3062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27043" id="CVE-2023-27043" type="cve" title="CVE-2023-27043"/>
      <reference href="https://bugzilla.redhat.com/2196183" id="2196183" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3062.html" id="ALSA-2024:3062" type="self" title="ALSA-2024:3062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="python3.11-idle" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-idle-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">367ecfb10afe7ceff8c96dd8536add709a9f9b1746704d7f32d1426ff5b91ae3</sum>
        </package>
        <package name="python3.11-debug" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-debug-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">41999d165b61fe8e21b715b171a27433d31e9cd61497981791445f25294cf808</sum>
        </package>
        <package name="python3.11-test" version="3.11.7" release="1.el8" epoch="0" arch="s390x" src="python3.11-3.11.7-1.el8.src.rpm">
          <filename>python3.11-test-3.11.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">e3115b7049010484a9d545b7388099b4accba85110d153b419c528347c482fee</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3066</id>
    <title>Moderate: exempi security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:39"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>exempi security update</summary>
    <description>Exempi provides a library for easy parsing of XMP metadata.

Security Fix(es):

* exempi: denial of service via opening of crafted audio file with ID3V2 frame (CVE-2020-18651)
* exempi: denial of service via opening of crafted webp file (CVE-2020-18652)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3066" id="RHSA-2024:3066" type="rhsa" title="RHSA-2024:3066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18651" id="CVE-2020-18651" type="cve" title="CVE-2020-18651"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18652" id="CVE-2020-18652" type="cve" title="CVE-2020-18652"/>
      <reference href="https://bugzilla.redhat.com/2235669" id="2235669" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2235673" id="2235673" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3066.html" id="ALSA-2024:3066" type="self" title="ALSA-2024:3066"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="exempi-devel" version="2.4.5" release="4.el8" epoch="0" arch="s390x" src="exempi-2.4.5-4.el8.src.rpm">
          <filename>exempi-devel-2.4.5-4.el8.s390x.rpm</filename>
          <sum type="sha256">a2c90a2dc126d6e5349f892f8e627a1af376a22032fb2c09600a1af2ae7b0b3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3127</id>
    <title>Moderate: zziplib security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>zziplib security update</summary>
    <description>The zziplib is a lightweight library to easily extract data from zip files.

Security Fix(es):

* zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c (CVE-2020-18770)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3127" id="RHSA-2024:3127" type="rhsa" title="RHSA-2024:3127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-18770" id="CVE-2020-18770" type="cve" title="CVE-2020-18770"/>
      <reference href="https://bugzilla.redhat.com/2246907" id="2246907" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3127.html" id="ALSA-2024:3127" type="self" title="ALSA-2024:3127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="zziplib-devel" version="0.13.68" release="13.el8_10" epoch="0" arch="s390x" src="zziplib-0.13.68-13.el8_10.src.rpm">
          <filename>zziplib-devel-0.13.68-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">873d8ec8db6940606f8e8397a58fc472496b7149f73ca69502a845845d9f209e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3258</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:43:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.

Security Fix(es):

* xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents (CVE-2024-31080)
* xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice (CVE-2024-31081)
* xorg-x11-server: Use-after-free in ProcRenderAddGlyphs (CVE-2024-31083)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3258" id="RHSA-2024:3258" type="rhsa" title="RHSA-2024:3258"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31080" id="CVE-2024-31080" type="cve" title="CVE-2024-31080"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31081" id="CVE-2024-31081" type="cve" title="CVE-2024-31081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-31083" id="CVE-2024-31083" type="cve" title="CVE-2024-31083"/>
      <reference href="https://bugzilla.redhat.com/2271997" id="2271997" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2271998" id="2271998" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2272000" id="2272000" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3258.html" id="ALSA-2024:3258" type="self" title="ALSA-2024:3258"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="23.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-23.el8_10.noarch.rpm</filename>
          <sum type="sha256">acff5990f645ca968a965a1d1b002fc3b079fc7c7f6701bad377e87de193a0ec</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="23.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-23.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-23.el8_10.s390x.rpm</filename>
          <sum type="sha256">c66238846298cdbd099b1f43dbd30d86e6da7d785a2ce0a0e692b118ee327e84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3269</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 16:15:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3269" id="RHSA-2024:3269" type="rhsa" title="RHSA-2024:3269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2961" id="CVE-2024-2961" type="cve" title="CVE-2024-2961"/>
      <reference href="https://bugzilla.redhat.com/2273404" id="2273404" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3269.html" id="ALSA-2024:3269" type="self" title="ALSA-2024:3269"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="glibc-static" version="2.28" release="251.el8_10.1" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">223edf32fefa1b8466e88b1924b7c119956fb0bb2f14991c91f1f3319cafb3fe</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.1" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">3fcd7ff75f93e6a8ad5ab6ea7169706351e924c3e87b5f980be501aaafbbc09a</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.1" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">9be990ad546f671fa2cf9a8a6500222c20389309d2cf6350b1e14df9037acc51</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.1" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.1.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">cf49ace3e336db7ff18c82e549125e83fbccf97c6bed00cb4426bc08475efa7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3270</id>
    <title>Moderate: sssd security update</title>
    <issued date="2024-05-22 00:00:00"/>
    <updated date="2024-05-29 14:39:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

Security Fix(es):

* sssd: Race condition during authorization leads to GPO policies functioning inconsistently (CVE-2023-3758)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3270" id="RHSA-2024:3270" type="rhsa" title="RHSA-2024:3270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-3758" id="CVE-2023-3758" type="cve" title="CVE-2023-3758"/>
      <reference href="https://bugzilla.redhat.com/2223762" id="2223762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3270.html" id="ALSA-2024:3270" type="self" title="ALSA-2024:3270"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.4" release="3.el8_10" epoch="0" arch="s390x" src="sssd-2.9.4-3.el8_10.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">34022e0deebc7ccfc5ba3c3c47492d9ac65fda4b62ceecb9498c8563f232f789</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3340</id>
    <title>Important: .NET 7.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:39:46"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 7.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3340" id="RHSA-2024:3340" type="rhsa" title="RHSA-2024:3340"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3340.html" id="ALSA-2024:3340" type="self" title="ALSA-2024:3340"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-7.0-source-built-artifacts" version="7.0.119" release="1.el8_10" epoch="0" arch="s390x" src="dotnet7.0-7.0.119-1.el8_10.src.rpm">
          <filename>dotnet-sdk-7.0-source-built-artifacts-7.0.119-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fca860ceb45647023c527968f69b36b81e87441c78b33f529188671f85964bb5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3341</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:40:15"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended
by loadable modules for new image formats. It is used by toolkits such as GTK+
or clutter.

Security Fix(es):

* gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3341" id="RHSA-2024:3341" type="rhsa" title="RHSA-2024:3341"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2022-48622" id="CVE-2022-48622" type="cve" title="CVE-2022-48622"/>
      <reference href="https://bugzilla.redhat.com/2260545" id="2260545" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3341.html" id="ALSA-2024:3341" type="self" title="ALSA-2024:3341"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="6.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-6.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">504e5f54ee82aef2074f900be64fdeec786429960eea544267825ee6f6e5bc04</sum>
        </package>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="6.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-6.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">d82170347f708f990c32a46cad954ec5694c2ffcef7d75b7959581bebc5a43bf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3344</id>
    <title>Important: glibc security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:43:06"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread
libraries (libpthread), standard math libraries (libm), and the name service
cache daemon (nscd) used by multiple programs on the system. Without these
libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
* glibc: null pointer dereferences after failed netgroup cache insertion
(CVE-2024-33600)
* glibc: netgroup cache may terminate daemon on memory allocation failure
(CVE-2024-33601)
* glibc: netgroup cache assumes NSS callback uses in-buffer strings
(CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3344" id="RHSA-2024:3344" type="rhsa" title="RHSA-2024:3344"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33599" id="CVE-2024-33599" type="cve" title="CVE-2024-33599"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33600" id="CVE-2024-33600" type="cve" title="CVE-2024-33600"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33601" id="CVE-2024-33601" type="cve" title="CVE-2024-33601"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33602" id="CVE-2024-33602" type="cve" title="CVE-2024-33602"/>
      <reference href="https://bugzilla.redhat.com/2277202" id="2277202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277204" id="2277204" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277205" id="2277205" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2277206" id="2277206" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3344.html" id="ALSA-2024:3344" type="self" title="ALSA-2024:3344"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="glibc-static" version="2.28" release="251.el8_10.2" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">22f7170a5fdb86b9fcee26699cc417ef0ad91393f192a6687c09576b65a6c304</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.2" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">2f6ec6100cbed32aff26fbe15376bfcbae83582b52f5405c411fe470dc639998</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.2" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">4d064cae8d7ae3840382d808a99399d7506e48e06933fbce144ed51701684e17</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.2" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.2.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">b3bd8fd2712a87871007724c5fda781bbec8c1e393d5c08f123d19d351d4d587</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3345</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-05-23 00:00:00"/>
    <updated date="2024-05-29 14:39:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.

Security Fix(es):

* dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
* dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3345" id="RHSA-2024:3345" type="rhsa" title="RHSA-2024:3345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30045" id="CVE-2024-30045" type="cve" title="CVE-2024-30045"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30046" id="CVE-2024-30046" type="cve" title="CVE-2024-30046"/>
      <reference href="https://bugzilla.redhat.com/2279695" id="2279695" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2279697" id="2279697" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3345.html" id="ALSA-2024:3345" type="self" title="ALSA-2024:3345"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_9_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_9_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.105" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.105-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.105-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cc684a138ad4ae66c1a06e1933c9f38076ae41205f4d33dcad3ddc31726cfe97</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3466</id>
    <title>Important: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-05-29 00:00:00"/>
    <updated date="2024-05-31 15:25:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
* python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3466" id="RHSA-2024:3466" type="rhsa" title="RHSA-2024:3466"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3651" id="CVE-2024-3651" type="cve" title="CVE-2024-3651"/>
      <reference href="https://bugzilla.redhat.com/2274779" id="2274779" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3466.html" id="ALSA-2024:3466" type="self" title="ALSA-2024:3466"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240530164632" context="0a5380d9" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-debug" version="3.9.19" release="1.module_el8.10.0+3849+a48d89aa" epoch="0" arch="s390x" src="python39-3.9.19-1.module_el8.10.0+3849+a48d89aa.src.rpm">
          <filename>python39-debug-3.9.19-1.module_el8.10.0+3849+a48d89aa.s390x.rpm</filename>
          <sum type="sha256">ac4c0f0c0fa1e7f8efc408d89d3240d5e4a5848c0fe16c58aec59365166286f0</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:3961</id>
    <title>Important: flatpak security update</title>
    <issued date="2024-06-17 00:00:00"/>
    <updated date="2024-06-19 09:15:02"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

Security Fix(es):

* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:3961" id="RHSA-2024:3961" type="rhsa" title="RHSA-2024:3961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-32462" id="CVE-2024-32462" type="cve" title="CVE-2024-32462"/>
      <reference href="https://bugzilla.redhat.com/2275981" id="2275981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-3961.html" id="ALSA-2024:3961" type="self" title="ALSA-2024:3961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="flatpak-devel" version="1.12.9" release="1.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-1.el8_10.src.rpm">
          <filename>flatpak-devel-1.12.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">79703be4012c21e59ac4950ce77ca190a20fb27ded22a4bc2b67ba399c899b7d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4000</id>
    <title>Important: ghostscript security update</title>
    <issued date="2024-06-20 00:00:00"/>
    <updated date="2024-06-20 11:36:26"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4000" id="RHSA-2024:4000" type="rhsa" title="RHSA-2024:4000"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-33871" id="CVE-2024-33871" type="cve" title="CVE-2024-33871"/>
      <reference href="https://bugzilla.redhat.com/2283508" id="2283508" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4000.html" id="ALSA-2024:4000" type="self" title="ALSA-2024:4000"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="ghostscript-tools-fonts" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">710d5f72bbec189126b0ddc9da7ef59ce946e80ef4c0f8625c6f53ab88605187</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-tools-printing-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">93d931034df994d651fed3086fac15cd58008c4ab463fd6d093bfc79bba93bf1</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="13.el8_10" epoch="0" arch="noarch" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-doc-9.27-13.el8_10.noarch.rpm</filename>
          <sum type="sha256">c9181a495aec69ce1beab0e8a8f490457499ea15a767a39378d1b3edcb8fcc33</sum>
        </package>
        <package name="libgs-devel" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>libgs-devel-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">ebb352efbde86e445a3140053321ab9a7d44bbacb18e32d8d2fb8a1e7d8d4bc8</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="13.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-13.el8_10.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">f2ef405a3a3691b1a50ec44dc9704a9788623be1604c1b498c732ce6320245e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4058</id>
    <title>Important: python3.11 security update</title>
    <issued date="2024-06-24 00:00:00"/>
    <updated date="2024-06-24 12:16:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4058" id="RHSA-2024:4058" type="rhsa" title="RHSA-2024:4058"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6597" id="CVE-2023-6597" type="cve" title="CVE-2023-6597"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276518" id="2276518" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4058.html" id="ALSA-2024:4058" type="self" title="ALSA-2024:4058"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a0d49048f6e49709bb525997b6d3f8333ea7006879c83428cc490fc87db9735e</sum>
        </package>
        <package name="python3.11-idle" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c6d29ad87bf0b224cd7a17f813134ac8e0b98f63b4af91660fb8de1d560e481f</sum>
        </package>
        <package name="python3.11-debug" version="3.11.9" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.9-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e7cd6112b516a037247f28ca42990e0dbf16dd96d415aec43dff914ec8ff6baf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4227</id>
    <title>Moderate: python-pillow security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:21:35"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python-pillow security update</summary>
    <description>The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities.

Security Fix(es):

* python-pillow: buffer overflow in _imagingcms.c (CVE-2024-28219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4227" id="RHSA-2024:4227" type="rhsa" title="RHSA-2024:4227"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28219" id="CVE-2024-28219" type="cve" title="CVE-2024-28219"/>
      <reference href="https://bugzilla.redhat.com/2272563" id="2272563" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4227.html" id="ALSA-2024:4227" type="self" title="ALSA-2024:4227"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3-pillow-doc" version="5.1.1" release="21.el8_10" epoch="0" arch="noarch" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-doc-5.1.1-21.el8_10.noarch.rpm</filename>
          <sum type="sha256">134e93c0c1fbe05ce479cb1da6eb2cc51105f38670cf89d252ba588cbaa95bcf</sum>
        </package>
        <package name="python3-pillow-devel" version="5.1.1" release="21.el8_10" epoch="0" arch="s390x" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-devel-5.1.1-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">86a730b8fa1a12de223ef937160dbb96e3ab5f24913057be7495629cedc9e022</sum>
        </package>
        <package name="python3-pillow-tk" version="5.1.1" release="21.el8_10" epoch="0" arch="s390x" src="python-pillow-5.1.1-21.el8_10.src.rpm">
          <filename>python3-pillow-tk-5.1.1-21.el8_10.s390x.rpm</filename>
          <sum type="sha256">d52d7d0fac4b4194e535a46db365d7fa0305b21b5efa50380a009c8e65e43df1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4243</id>
    <title>Moderate: python3 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 12:15:32"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4243" id="RHSA-2024:4243" type="rhsa" title="RHSA-2024:4243"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-0450" id="CVE-2024-0450" type="cve" title="CVE-2024-0450"/>
      <reference href="https://bugzilla.redhat.com/2276525" id="2276525" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4243.html" id="ALSA-2024:4243" type="self" title="ALSA-2024:4243"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-debug" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">12044e2aed42651294d0e20ba0ac5ac2ec172f24bbb7dff0f78fc23dc8058f74</sum>
        </package>
        <package name="python3.12-idle" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b0edf04005aa571e6d483bebe2b508d006a4bc5661dd3ef3d81dbbed92fae027</sum>
        </package>
        <package name="python3.12-test" version="3.12.3" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.3-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.3-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">c3aaea1411b7f372549dcf8a55cc3352b821de93fb27d85b7c89b702411c8c84</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4247</id>
    <title>Moderate: libuv security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:49:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libuv security update</summary>
    <description>libuv is a multi-platform support library with a focus on asynchronous I/O. 

Security Fix(es):

* libuv: Improper Domain Lookup that potentially leads to SSRF attacks (CVE-2024-24806)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4247" id="RHSA-2024:4247" type="rhsa" title="RHSA-2024:4247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-24806" id="CVE-2024-24806" type="cve" title="CVE-2024-24806"/>
      <reference href="https://bugzilla.redhat.com/2263292" id="2263292" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4247.html" id="ALSA-2024:4247" type="self" title="ALSA-2024:4247"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libuv-devel" version="1.41.1" release="2.el8_10" epoch="1" arch="s390x" src="libuv-1.41.1-2.el8_10.src.rpm">
          <filename>libuv-devel-1.41.1-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">dfa2019ab74b827e548b8ab4f1e57725c39c4500494bb84cabaa8c9220a02a02</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4252</id>
    <title>Moderate: nghttp2 security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:45:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

Security Fix(es):

* nghttp2: CONTINUATION frames DoS (CVE-2024-28182)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4252" id="RHSA-2024:4252" type="rhsa" title="RHSA-2024:4252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-28182" id="CVE-2024-28182" type="cve" title="CVE-2024-28182"/>
      <reference href="https://bugzilla.redhat.com/2268639" id="2268639" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4252.html" id="ALSA-2024:4252" type="self" title="ALSA-2024:4252"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="nghttp2" version="1.33.0" release="6.el8_10.1" epoch="0" arch="s390x" src="nghttp2-1.33.0-6.el8_10.1.src.rpm">
          <filename>nghttp2-1.33.0-6.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">2f86f3c0c6eb859a8c9327ecdb0cc0c45837c652b3d6e16301973b0e49396db7</sum>
        </package>
        <package name="libnghttp2-devel" version="1.33.0" release="6.el8_10.1" epoch="0" arch="s390x" src="nghttp2-1.33.0-6.el8_10.1.src.rpm">
          <filename>libnghttp2-devel-1.33.0-6.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">f15d8d121f1092a78fcab47504f5e548afc89e4e19fdd5257aec482d8f71cfbe</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4259</id>
    <title>Moderate: xmlrpc-c security and bug fix update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:16:03"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security and bug fix update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.

Security Fix(es):

* expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4259" id="RHSA-2024:4259" type="rhsa" title="RHSA-2024:4259"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52425" id="CVE-2023-52425" type="cve" title="CVE-2023-52425"/>
      <reference href="https://bugzilla.redhat.com/2262877" id="2262877" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4259.html" id="ALSA-2024:4259" type="self" title="ALSA-2024:4259"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xmlrpc-c-devel" version="1.51.0" release="9.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-9.el8_10.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">5101aea366476126203f54d10a24f2fd8838e4f479a174d0236804b397bd2b0c</sum>
        </package>
        <package name="xmlrpc-c-c++" version="1.51.0" release="9.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-9.el8_10.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">beaa17d5adb5ae64d771a1270e0974f9b0c7340ca8d7ae997996f8095e12b8e5</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="9.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-9.el8_10.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">dd074af9e0fd0e145680cf5a6572f0e351bbfe271d604796537aee7165af16d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4264</id>
    <title>Low: openldap security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 11:33:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>openldap security update</summary>
    <description>OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. 

Security Fix(es):

* openldap: null pointer dereference in  ber_memalloc_x  function (CVE-2023-2953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4264" id="RHSA-2024:4264" type="rhsa" title="RHSA-2024:4264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-2953" id="CVE-2023-2953" type="cve" title="CVE-2023-2953"/>
      <reference href="https://bugzilla.redhat.com/2210651" id="2210651" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4264.html" id="ALSA-2024:4264" type="self" title="ALSA-2024:4264"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="openldap-servers" version="2.4.46" release="19.el8_10" epoch="0" arch="s390x" src="openldap-2.4.46-19.el8_10.src.rpm">
          <filename>openldap-servers-2.4.46-19.el8_10.s390x.rpm</filename>
          <sum type="sha256">99cff26c8cbdafb4f573de7d9ba19707f993dfb25d8a0c145619410aff724e85</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4267</id>
    <title>Moderate: fontforge security update</title>
    <issued date="2024-07-02 00:00:00"/>
    <updated date="2024-07-03 14:14:44"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts. 

Security Fix(es):

* fontforge: command injection via crafted filenames (CVE-2024-25081)
* fontforge: command injection via crafted archives or compressed files (CVE-2024-25082)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4267" id="RHSA-2024:4267" type="rhsa" title="RHSA-2024:4267"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25081" id="CVE-2024-25081" type="cve" title="CVE-2024-25081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-25082" id="CVE-2024-25082" type="cve" title="CVE-2024-25082"/>
      <reference href="https://bugzilla.redhat.com/2266180" id="2266180" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2266181" id="2266181" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4267.html" id="ALSA-2024:4267" type="self" title="ALSA-2024:4267"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="fontforge" version="20200314" release="6.el8_10" epoch="0" arch="s390x" src="fontforge-20200314-6.el8_10.src.rpm">
          <filename>fontforge-20200314-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">65086f6313262d440ef093647c83ffdab759b280e37292b0516bf872ab301ad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4351</id>
    <title>Low: virt:rhel and virt-devel:rhel security and bug fix update</title>
    <issued date="2024-07-08 00:00:00"/>
    <updated date="2024-07-08 11:17:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>virt:rhel and virt-devel:rhel security and bug fix update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix:

* virt:rhel/libvirt: stack use-after-free in virNetClientIOEventLoop (CVE-2024-4418) 

Bug fix:

* virsh destroy with --graceful destroyed a paused guest (qemu process paused by SIGSTOP) (JIRA:AlmaLinux-36064)</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4351" id="RHSA-2024:4351" type="rhsa" title="RHSA-2024:4351"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4418" id="CVE-2024-4418" type="cve" title="CVE-2024-4418"/>
      <reference href="https://bugzilla.redhat.com/2278616" id="2278616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4351.html" id="ALSA-2024:4351" type="self" title="ALSA-2024:4351"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240523065118" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="49.module_el8.10.0+3839+c94ce74b" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-49.module_el8.10.0+3839+c94ce74b.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-49.module_el8.10.0+3839+c94ce74b.s390x.rpm</filename>
          <sum type="sha256">75d0b701db13e76fba18534602594f2f72213bd18fa1fdd8c5965ffadb92aa6c</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4420</id>
    <title>Important: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 13:17:41"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write (CVE-2024-4467)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4420" id="RHSA-2024:4420" type="rhsa" title="RHSA-2024:4420"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4467" id="CVE-2024-4467" type="cve" title="CVE-2024-4467"/>
      <reference href="https://bugzilla.redhat.com/2278875" id="2278875" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4420.html" id="ALSA-2024:4420" type="self" title="ALSA-2024:4420"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240710081321" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="50.module_el8.10.0+3869+b8959270" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-50.module_el8.10.0+3869+b8959270.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-50.module_el8.10.0+3869+b8959270.s390x.rpm</filename>
          <sum type="sha256">4764f290422497636ad2f399d795b5318bef8617b8c7ae6be9fff7ea66f63f0f</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">4aa3decdd9e878df2d627b22172012efdadd134fceeb7da2a2ef311e270901fe</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="5.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-libnbd-1.6.0-5.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">7d82ca5571d0fa605700b898d6aff9f132045631fa12a691696068891f48bed1</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4438</id>
    <title>Moderate: dotnet6.0 security update</title>
    <issued date="2024-07-09 00:00:00"/>
    <updated date="2024-07-10 09:06:31"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dotnet6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4438" id="RHSA-2024:4438" type="rhsa" title="RHSA-2024:4438"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4438.html" id="ALSA-2024:4438" type="self" title="ALSA-2024:4438"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.132" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.132-1.el8_10.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.132-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">81d530f58e70ce52dbe0673ec22386f0b06dbd1345b8f2c60b18ef309688fba5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4451</id>
    <title>Important: dotnet8.0 security update</title>
    <issued date="2024-07-10 00:00:00"/>
    <updated date="2024-07-11 08:43:54"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dotnet8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  8.0.107 and Runtime 8.0.7.

Security Fix(es):

* dotnet: DoS in System.Text.Json (CVE-2024-30105)
* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)
* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4451" id="RHSA-2024:4451" type="rhsa" title="RHSA-2024:4451"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-30105" id="CVE-2024-30105" type="cve" title="CVE-2024-30105"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-35264" id="CVE-2024-35264" type="cve" title="CVE-2024-35264"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38095" id="CVE-2024-38095" type="cve" title="CVE-2024-38095"/>
      <reference href="https://bugzilla.redhat.com/2295320" id="2295320" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295321" id="2295321" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2295323" id="2295323" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4451.html" id="ALSA-2024:4451" type="self" title="ALSA-2024:4451"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fc0dab9736bee54e8c0384322c75a12ae348682b431339bef2631ae7eb1cb576</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4567</id>
    <title>Important: java-11-openjdk security update</title>
    <issued date="2024-07-16 00:00:00"/>
    <updated date="2024-07-26 15:17:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Pack200 increase loading time due to improper header validation (8322106) (CVE-2024-21144)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4567" id="RHSA-2024:4567" type="rhsa" title="RHSA-2024:4567"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21144" id="CVE-2024-21144" type="cve" title="CVE-2024-21144"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297964" id="2297964" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4567.html" id="ALSA-2024:4567" type="self" title="ALSA-2024:4567"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-11-openjdk-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">10c12f0a5876fb243aac9cb8781fc3827d65ce2218b54403059565799c593749</sum>
        </package>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">3da896fae660da485fb11d6f676770ef86630bc41c77ddbe4c05e1d2714044a6</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">5b690fbfd2f3d34e765c7af2717ec6e211e2f1e3295d1770f2a8c9ed3a8c4707</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">766d4409516b257b5125420750471d373c21b9f2000f8967c56ae9a54657e4d2</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">88f002ac7140ee6a14c709b3cf66d80290a0b72f3e72a24118adfcd935619a01</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">e254ab206185cf1c711fc78521dfc5b0e071eacf3aaf31aa2ebb6fe306dbaae8</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.24.0.8" release="3.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.24.0.8-3.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.24.0.8-3.el8.s390x.rpm</filename>
          <sum type="sha256">eacdf526f293519ef01120db45a00981306f17ba6c65b294cdfec9e3cf3f19a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4568</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:15:34"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4568" id="RHSA-2024:4568" type="rhsa" title="RHSA-2024:4568"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4568.html" id="ALSA-2024:4568" type="self" title="ALSA-2024:4568"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">153de1b6ae91c0a21d5ce5f1cad0b0befbe1cbf685c9fad547a6ce7bed1defcd</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">36ea314f1846ef086be2f733b254bca3ab4c0c6f25aff908d16c12a91f4fabfa</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">42b1d9fea42bef4684fc2755bcb62d1bbce4bb0f35a5349395b58053ae412eaa</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">4c695f94ba225a8f9494d0471564bf545623b8baa9a3925937d5791a70e8bddb</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">5635007e7f92d7e487a608f038a683e152acf4810fd04df3dbbe4db60bcae912</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">597ba519b579d43c62b43603e5faef6058f91652c8bb48710403f004efdeac17</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.12.0.7" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.12.0.7-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.12.0.7-2.el8.s390x.rpm</filename>
          <sum type="sha256">60ecbe12ee3b6428e0a1208d9152b149cff12ae4e0067fab3324816420b1baa8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4573</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2024-07-17 00:00:00"/>
    <updated date="2024-07-18 14:17:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

* OpenJDK: RangeCheckElimination array index overflow (8323231) (CVE-2024-21147)
* OpenJDK: potential UTF8 size overflow (8314794) (CVE-2024-21131)
* OpenJDK: Excessive symbol length can lead to infinite loop (8319859) (CVE-2024-21138)
* OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) (CVE-2024-21140)
* OpenJDK: Out-of-bounds access in 2D image handling (8324559) (CVE-2024-21145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4573" id="RHSA-2024:4573" type="rhsa" title="RHSA-2024:4573"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21131" id="CVE-2024-21131" type="cve" title="CVE-2024-21131"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21138" id="CVE-2024-21138" type="cve" title="CVE-2024-21138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21140" id="CVE-2024-21140" type="cve" title="CVE-2024-21140"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21145" id="CVE-2024-21145" type="cve" title="CVE-2024-21145"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21147" id="CVE-2024-21147" type="cve" title="CVE-2024-21147"/>
      <reference href="https://bugzilla.redhat.com/2297961" id="2297961" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297962" id="2297962" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297963" id="2297963" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297976" id="2297976" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297977" id="2297977" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4573.html" id="ALSA-2024:4573" type="self" title="ALSA-2024:4573"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">53600aa4390fb4b16c53463c32242d6af0495ad025ba8559886f6133ca22b12d</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">8b5c38728ba0e54e7a0002c5077b1f1e4068a8e34b90f0cf2cd2c2b555a321c3</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">9e5f2dbd07044ffb6c2d581c7c8e5c4795192658cc5e9cd0edfbf47240d2396a</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">bbc112aed29a03429359e525137d90c89c37267b0384b2b690e32038a756438b</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">bcf7c230864565541f8c867608fb4455af9aa59640ff10aec84180882506bc55</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">cda24bb6cc01de6e829c50eb8357ae4c73fedf75ba932adb42a24bbc58d1e426</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.4.0.7" release="1.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.4.0.7-1.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.4.0.7-1.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">d44d2491557b964f941b63ec7022d649c861190a4efa7cbb4f7ae5c6f1738f9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:4617</id>
    <title>Important: qt5-qtbase security update</title>
    <issued date="2024-07-18 00:00:00"/>
    <updated date="2024-07-19 10:26:48"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>qt5-qtbase security update</summary>
    <description>Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. 

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:4617" id="RHSA-2024:4617" type="rhsa" title="RHSA-2024:4617"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-39936" id="CVE-2024-39936" type="cve" title="CVE-2024-39936"/>
      <reference href="https://bugzilla.redhat.com/2295867" id="2295867" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-4617.html" id="ALSA-2024:4617" type="self" title="ALSA-2024:4617"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="qt5-qtbase-static" version="5.15.3" release="8.el8_10" epoch="0" arch="s390x" src="qt5-qtbase-5.15.3-8.el8_10.src.rpm">
          <filename>qt5-qtbase-static-5.15.3-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">1f6f040f2bec36824832ddc1f7db86c2dec7d1c91d1b3ffb3cae4b0a73fd7dec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5079</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-08-07 00:00:00"/>
    <updated date="2024-08-08 08:54:05"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c (CVE-2018-15209)
* libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c (CVE-2023-25433)
* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)
* libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5079" id="RHSA-2024:5079" type="rhsa" title="RHSA-2024:5079"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2018-15209" id="CVE-2018-15209" type="cve" title="CVE-2018-15209"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-25433" id="CVE-2023-25433" type="cve" title="CVE-2023-25433"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-52356" id="CVE-2023-52356" type="cve" title="CVE-2023-52356"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6228" id="CVE-2023-6228" type="cve" title="CVE-2023-6228"/>
      <reference href="https://bugzilla.redhat.com/1614051" id="1614051" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2218744" id="2218744" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2240995" id="2240995" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2251344" id="2251344" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5079.html" id="ALSA-2024:5079" type="self" title="ALSA-2024:5079"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="32.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-32.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-32.el8_10.s390x.rpm</filename>
          <sum type="sha256">9a8cfa3fe4772252313bc0d2d2c172482050483b860bf1b8d514c95f880b8c9b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5305</id>
    <title>Moderate: poppler security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:07:07"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

* poppler: pdfinfo: crash in broken documents when using -dests parameter (CVE-2024-6239)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5305" id="RHSA-2024:5305" type="rhsa" title="RHSA-2024:5305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6239" id="CVE-2024-6239" type="cve" title="CVE-2024-6239"/>
      <reference href="https://bugzilla.redhat.com/2293594" id="2293594" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5305.html" id="ALSA-2024:5305" type="self" title="ALSA-2024:5305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="poppler-glib-doc" version="20.11.0" release="12.el8_10" epoch="0" arch="noarch" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-glib-doc-20.11.0-12.el8_10.noarch.rpm</filename>
          <sum type="sha256">76d6c995554c5fe4b120b90e8fd0396bf9528427db98fd234e9dd85d94a57493</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-devel-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">9d7ee6702a0207aba127de8c77ca479de7d15094e0001baf14c913ce27070f0d</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">aefab2a04ebf9ced69dd7f153e917805c6497d2b4d8527aac934faf4d3323819</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-glib-devel-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">bf24dbb904518a2f8b2b1f60691c46d729c02765d987fc932555b2750216e48e</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">f308f2168bdfab27bbcbb739cef614e5d6e032275cca9b4699d85f695905a347</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="12.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-12.el8_10.src.rpm">
          <filename>poppler-cpp-20.11.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">fb5cbd7c8dce564678aaef4d8cdbf59816e3dd1a075e6c87c01997fdcb2b6a74</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5337</id>
    <title>Moderate: .NET 8.0 security update</title>
    <issued date="2024-08-13 00:00:00"/>
    <updated date="2024-08-21 12:19:28"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.108 and .NET Runtime 8.0.8.

Security Fix(es):

* dotnet: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* EMBARGOED CVE-2024-38167 dotnet8.0: Information disclosure vulnerability in TlsStream (CVE-2024-38167)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5337" id="RHSA-2024:5337" type="rhsa" title="RHSA-2024:5337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38167" id="CVE-2024-38167" type="cve" title="CVE-2024-38167"/>
      <reference href="https://bugzilla.redhat.com/2302428" id="2302428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5337.html" id="ALSA-2024:5337" type="self" title="ALSA-2024:5337"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cfae6ff3b5d135fa8b3930a1055b20110ee26e7e8566cdd3ddb70fcd697ddd56</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5390</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2024-08-14 00:00:00"/>
    <updated date="2024-08-21 12:22:57"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam (CVE-2024-1737)
* bind9: bind: SIG(0) can be used to exhaust CPU resources (CVE-2024-1975)
* bind: bind9: Assertion failure when serving both stale cache data and authoritative zone content (CVE-2024-4076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5390" id="RHSA-2024:5390" type="rhsa" title="RHSA-2024:5390"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1737" id="CVE-2024-1737" type="cve" title="CVE-2024-1737"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-1975" id="CVE-2024-1975" type="cve" title="CVE-2024-1975"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4076" id="CVE-2024-4076" type="cve" title="CVE-2024-4076"/>
      <reference href="https://bugzilla.redhat.com/2298893" id="2298893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298901" id="2298901" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2298904" id="2298904" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5390.html" id="ALSA-2024:5390" type="self" title="ALSA-2024:5390"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.s390x.rpm</filename>
          <sum type="sha256">290cfc6df55d32ed356021b4511129333a15849b6564bfd1ede89ad09e3231c2</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.noarch.rpm</filename>
          <sum type="sha256">6f81dab2b8aa02ad45c0863bd50276bbcc58728a9a77d3efb59011b1cb55fd67</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5531</id>
    <title>Important: python3.12-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:36:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5531" id="RHSA-2024:5531" type="rhsa" title="RHSA-2024:5531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5531.html" id="ALSA-2024:5531" type="self" title="ALSA-2024:5531"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-4.el8_10.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">361f91dbf3ae4385b1dee922c6101a87c4baf4860b1af647ee3833e456723723</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5532</id>
    <title>Important: python3.11-setuptools security update</title>
    <issued date="2024-08-19 00:00:00"/>
    <updated date="2024-08-21 12:38:56"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages.  This package also contains the runtime components of setuptools, necessary to execute the software that requires pkg_resources.

Security Fix(es):

* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5532" id="RHSA-2024:5532" type="rhsa" title="RHSA-2024:5532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5532.html" id="ALSA-2024:5532" type="self" title="ALSA-2024:5532"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="3.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-3.el8_10.src.rpm">
          <filename>python3.11-setuptools-65.5.1-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">11eff0251416567b1e5647fd5168ab28590e64d3d020ec6896beb22208d2d3a5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5941</id>
    <title>Moderate: libvpx security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-29 08:25:04"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
* libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5941" id="RHSA-2024:5941" type="rhsa" title="RHSA-2024:5941"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-6349" id="CVE-2023-6349" type="cve" title="CVE-2023-6349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5197" id="CVE-2024-5197" type="cve" title="CVE-2024-5197"/>
      <reference href="https://bugzilla.redhat.com/2283553" id="2283553" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2291198" id="2291198" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5941.html" id="ALSA-2024:5941" type="self" title="ALSA-2024:5941"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libvpx-devel" version="1.7.0" release="11.el8_10" epoch="0" arch="s390x" src="libvpx-1.7.0-11.el8_10.src.rpm">
          <filename>libvpx-devel-1.7.0-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">c9996989cbb6b379e496e22919778ccdf73528b6dfad54f54d8b74e59cbe2bb1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:5962</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-08-28 00:00:00"/>
    <updated date="2024-08-29 08:28:45"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:5962" id="RHSA-2024:5962" type="rhsa" title="RHSA-2024:5962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6345" id="CVE-2024-6345" type="cve" title="CVE-2024-6345"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2297771" id="2297771" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-5962.html" id="ALSA-2024:5962" type="self" title="ALSA-2024:5962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020240828192834" context="0a5380d9" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-debug" version="3.9.19" release="7.module_el8.10.0+3885+d986a391" epoch="0" arch="s390x" src="python39-3.9.19-7.module_el8.10.0+3885+d986a391.src.rpm">
          <filename>python39-debug-3.9.19-7.module_el8.10.0+3885+d986a391.s390x.rpm</filename>
          <sum type="sha256">79d0e1b3231044c9703c40364f5252760d832d99614197ed65d558177ca8bd61</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6422</id>
    <title>Important: bubblewrap and flatpak security update</title>
    <issued date="2024-09-05 00:00:00"/>
    <updated date="2024-09-06 07:42:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bubblewrap and flatpak security update</summary>
    <description>Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged containers that works as a setuid binary on kernels without user namespaces.

Security Fix(es):

* flatpak: Access to files outside sandbox for apps using persistent= (--persist) (CVE-2024-42472)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6422" id="RHSA-2024:6422" type="rhsa" title="RHSA-2024:6422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-42472" id="CVE-2024-42472" type="cve" title="CVE-2024-42472"/>
      <reference href="https://bugzilla.redhat.com/2305202" id="2305202" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6422.html" id="ALSA-2024:6422" type="self" title="ALSA-2024:6422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="flatpak-devel" version="1.12.9" release="3.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-3.el8_10.src.rpm">
          <filename>flatpak-devel-1.12.9-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">366cb55d10aa6d11c848f74ce38429b36a28fe5b98095e1b27cc177ad5391bbc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6961</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 09:28:10"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.  The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately.  Documentation for Python is provided in the python3.12-docs package.  Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.  For the unversioned "python" executable, see manual page "unversioned-python".

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6961" id="RHSA-2024:6961" type="rhsa" title="RHSA-2024:6961"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6961.html" id="ALSA-2024:6961" type="self" title="ALSA-2024:6961"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">52991b0db34496161820312a498bf234c710bd9adedadc1f9235687e72a4149d</sum>
        </package>
        <package name="python3.12-idle" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">643c5d66db73ebf99be4886cd3d4b5e457b14b97e41d75c5bd79e32dcf063301</sum>
        </package>
        <package name="python3.12-debug" version="3.12.5" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.5-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.5-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">fd675b216a1041e4f98f925d12b2936c01a1fccd29f1ea5b91a33f1550b3a0a3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6962</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 09:21:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
* cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
* python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6962" id="RHSA-2024:6962" type="rhsa" title="RHSA-2024:6962"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-4032" id="CVE-2024-4032" type="cve" title="CVE-2024-4032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6923" id="CVE-2024-6923" type="cve" title="CVE-2024-6923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8088" id="CVE-2024-8088" type="cve" title="CVE-2024-8088"/>
      <reference href="https://bugzilla.redhat.com/2292921" id="2292921" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302255" id="2302255" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2307370" id="2307370" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6962.html" id="ALSA-2024:6962" type="self" title="ALSA-2024:6962"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-test-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">4569e71337ebd24b81c87d185ca51d25e33edee844fd579937c77c576a5c8aa8</sum>
        </package>
        <package name="python3.11-debug" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8e7677ea5824de3b6a7ab3912f5a21a63fd51f25d2acdb0a80109d34b5227dd</sum>
        </package>
        <package name="python3.11-idle" version="3.11.9" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.9-7.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.9-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">c7630022ec36e1f2b61e534354f474ec6fc8f27573a718cd63afc9b2f7b65c38</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6963</id>
    <title>Moderate: gtk3 security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:32:37"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gtk3 security update</summary>
    <description>The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3.

Security Fix(es):

* gtk3: gtk2: Library injection from CWD (CVE-2024-6655)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6963" id="RHSA-2024:6963" type="rhsa" title="RHSA-2024:6963"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6655" id="CVE-2024-6655" type="cve" title="CVE-2024-6655"/>
      <reference href="https://bugzilla.redhat.com/2297098" id="2297098" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6963.html" id="ALSA-2024:6963" type="self" title="ALSA-2024:6963"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="gtk3-devel-docs" version="3.22.30" release="12.el8_10" epoch="0" arch="s390x" src="gtk3-3.22.30-12.el8_10.src.rpm">
          <filename>gtk3-devel-docs-3.22.30-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">37cf6962434da165ef9f912e16d508454fd6e1d7ebd9bcd42b5b0f5064e01267</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6964</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 14:46:01"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446)
* QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409)
* libnbd: NBD server improper certificate validation (CVE-2024-7383)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6964" id="RHSA-2024:6964" type="rhsa" title="RHSA-2024:6964"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3446" id="CVE-2024-3446" type="cve" title="CVE-2024-3446"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7383" id="CVE-2024-7383" type="cve" title="CVE-2024-7383"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7409" id="CVE-2024-7409" type="cve" title="CVE-2024-7409"/>
      <reference href="https://bugzilla.redhat.com/2274211" id="2274211" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302487" id="2302487" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2302865" id="2302865" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6964.html" id="ALSA-2024:6964" type="self" title="ALSA-2024:6964"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="53.module_el8.10.0+3897+eb84924d" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-53.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">70672c9dd9aa490b115d343a08b97aaef49d57919f9d71412bc33b96369f5a9b</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">90ccfe2af537cb98179d4dbf1907af3506728fa8c2748d797958d22c7e889dc5</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">e62f8c5d04ef78db7902103af065899d2ac4ac49c260f604c7f99ec07f06de7b</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:6973</id>
    <title>Moderate: dovecot security update</title>
    <issued date="2024-09-24 00:00:00"/>
    <updated date="2024-09-24 11:30:59"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. 

Security Fix(es):

* dovecot: using a large number of address headers may trigger a denial of service (CVE-2024-23184)
* dovecot: very large headers can cause resource exhaustion when parsing message (CVE-2024-23185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:6973" id="RHSA-2024:6973" type="rhsa" title="RHSA-2024:6973"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23184" id="CVE-2024-23184" type="cve" title="CVE-2024-23184"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23185" id="CVE-2024-23185" type="cve" title="CVE-2024-23185"/>
      <reference href="https://bugzilla.redhat.com/2305909" id="2305909" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2305910" id="2305910" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-6973.html" id="ALSA-2024:6973" type="self" title="ALSA-2024:6973"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dovecot-devel" version="2.3.16" release="6.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-6.el8_10.src.rpm">
          <filename>dovecot-devel-2.3.16-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">b88ce76d9b90b599dce3eebb3c7b05e5c51f5b59b05dac27efdbcc85d1ae90b5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7463</id>
    <title>Important: cups-filters security update</title>
    <issued date="2024-10-01 00:00:00"/>
    <updated date="2024-10-03 09:11:47"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>cups-filters security update</summary>
    <description>The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. 

Security Fix(es):

* cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source ()
* cups-filters: libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes (CVE-2024-47076)
* cups: libppd: remote command injection via attacker controlled data in PPD file ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7463" id="RHSA-2024:7463" type="rhsa" title="RHSA-2024:7463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47076" id="CVE-2024-47076" type="cve" title="CVE-2024-47076"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47175" id="CVE-2024-47175" type="cve" title="CVE-2024-47175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-47176" id="CVE-2024-47176" type="cve" title="CVE-2024-47176"/>
      <reference href="https://bugzilla.redhat.com/2314252" id="2314252" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314253" id="2314253" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2314256" id="2314256" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7463.html" id="ALSA-2024:7463" type="self" title="ALSA-2024:7463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="cups-filters-devel" version="1.20.0" release="35.el8_10" epoch="0" arch="s390x" src="cups-filters-1.20.0-35.el8_10.src.rpm">
          <filename>cups-filters-devel-1.20.0-35.el8_10.s390x.rpm</filename>
          <sum type="sha256">0fc0859a602fdca8a5303a0c13e492063ba6bda49f235ef137cbc2ade6a459c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7851</id>
    <title>Important: .NET 6.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:22:18"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 6.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.135 and .NET Runtime 6.0.35.

Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7851" id="RHSA-2024:7851" type="rhsa" title="RHSA-2024:7851"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7851.html" id="ALSA-2024:7851" type="self" title="ALSA-2024:7851"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-6.0-source-built-artifacts" version="6.0.135" release="1.el8_10" epoch="0" arch="s390x" src="dotnet6.0-6.0.135-1.el8_10.src.rpm">
          <filename>dotnet-sdk-6.0-source-built-artifacts-6.0.135-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">80a7526e51abb4ceec716c79fffefc34096bed0018c80932519755759f14ce62</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:7868</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2024-10-09 00:00:00"/>
    <updated date="2024-10-10 11:20:08"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.110 and .NET Runtime 8.0.10.

Security Fix(es):

* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

* dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
* dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
* dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
* dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution (CVE-2024-38229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:7868" id="RHSA-2024:7868" type="rhsa" title="RHSA-2024:7868"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-38229" id="CVE-2024-38229" type="cve" title="CVE-2024-38229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43483" id="CVE-2024-43483" type="cve" title="CVE-2024-43483"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43484" id="CVE-2024-43484" type="cve" title="CVE-2024-43484"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-43485" id="CVE-2024-43485" type="cve" title="CVE-2024-43485"/>
      <reference href="https://bugzilla.redhat.com/2315729" id="2315729" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315730" id="2315730" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2315731" id="2315731" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2316161" id="2316161" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-7868.html" id="ALSA-2024:7868" type="self" title="ALSA-2024:7868"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.110" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.110-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.110-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">d92d55ce076e5a56ab2eb9582bf26256d13cd4144075792aff4e67fb742e7eab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8121</id>
    <title>Moderate: java-11-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:37:55"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-11-openjdk security update</summary>
    <description>The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8121" id="RHSA-2024:8121" type="rhsa" title="RHSA-2024:8121"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8121.html" id="ALSA-2024:8121" type="self" title="ALSA-2024:8121"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-11-openjdk-devel-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-devel-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">1083d8c040cd0211afc48c161d72159f23ef49744227625f0e5cfaaccf5f4aef</sum>
        </package>
        <package name="java-11-openjdk-demo-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-demo-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">4c677e77ea4cf058ec49d470f59d0e19fda6154c5639c30cd8df69ea0b32dd38</sum>
        </package>
        <package name="java-11-openjdk-jmods-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-jmods-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">4e82d1adce0fa0477483976847f648c0d5615ba5891f56f47520c1183f00d38a</sum>
        </package>
        <package name="java-11-openjdk-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">709b7b21f1428b26ff076ab05f2d22c78e1cbf889d30d6e90c78b1640c48e391</sum>
        </package>
        <package name="java-11-openjdk-src-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-src-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">7378eddffcd76a7fe3543273ba03a82e015382931f929295f7898fe1b4625851</sum>
        </package>
        <package name="java-11-openjdk-headless-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-headless-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">9349b1aebdd0f38e03c077754bdcf9aa5c4b682e828ac966899c76e2ebc0ce8b</sum>
        </package>
        <package name="java-11-openjdk-static-libs-slowdebug" version="11.0.25.0.9" release="2.el8" epoch="1" arch="s390x" src="java-11-openjdk-11.0.25.0.9-2.el8.src.rpm">
          <filename>java-11-openjdk-static-libs-slowdebug-11.0.25.0.9-2.el8.s390x.rpm</filename>
          <sum type="sha256">940168cad87370af1e94ae0db0b58f949ecdd7058843395b0cee56a133f71d0b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8124</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:31:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8124" id="RHSA-2024:8124" type="rhsa" title="RHSA-2024:8124"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8124.html" id="ALSA-2024:8124" type="self" title="ALSA-2024:8124"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">36524a563c7aefe63dbec8668c06f3cf65464a5cb7f39b24afe516b9a2b416b3</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">488fc6f9a83b528193b4cab99299d30fd9fb3cf4b57d4d175b890ecb223a1543</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">80e589f295959eb27e0a78523a668f17b8132dc43e4764b188873a1303350d5b</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">9d4054cf753999118cf6d03ad9d9f9e48b37c005be011628a339fafc0fbf173d</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">9fc61b269c484319a8cb6cb642ddbddb8abe6036109ed13c1e7a6812447aed88</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">b140f7cfbee3f99a431143cd770c8d56de9c1579aceea9f9fb8244a06af77e74</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.13.0.11" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.13.0.11-3.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.13.0.11-3.el8.s390x.rpm</filename>
          <sum type="sha256">fb744cce87d698bf8ab6d356116fcee3bdb36ad9fc69200d9b87c3e96f813331</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8127</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2024-10-16 00:00:00"/>
    <updated date="2024-10-18 09:27:13"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 runtime environment.

Security Fix(es):

* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8127" id="RHSA-2024:8127" type="rhsa" title="RHSA-2024:8127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-48161" id="CVE-2023-48161" type="cve" title="CVE-2023-48161"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21208" id="CVE-2024-21208" type="cve" title="CVE-2024-21208"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21210" id="CVE-2024-21210" type="cve" title="CVE-2024-21210"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21217" id="CVE-2024-21217" type="cve" title="CVE-2024-21217"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-21235" id="CVE-2024-21235" type="cve" title="CVE-2024-21235"/>
      <reference href="https://bugzilla.redhat.com/2251025" id="2251025" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318524" id="2318524" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318526" id="2318526" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318530" id="2318530" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2318534" id="2318534" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8127.html" id="ALSA-2024:8127" type="self" title="ALSA-2024:8127"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">22faf059365767305748d29cb855a4d070010bc018f06a045635590d35f16425</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">2640ea40c971b91de41f988eb5361f6d224e4095a02c25f4268e68027bedbf63</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">32db976d3b681b7c396e23ce4a7ea7f123f4f0757a7ada066fee92c422a45d9e</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">4704178dbfa55c78e1f45379f0c5bbe2e6d270ae1d236eb23dda41f84c042c1b</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">92ff9f5eb3dd64bc9f89f152d3a611cab1a9d6f6a8aff8e6c787316e8187c14e</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">940fe0e3443b0ea0986f5b6a6700b4152021fc4a678cdaa729b6407146e98168</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.5.0.10" release="3.el8.alma.1" epoch="1" arch="s390x" src="java-21-openjdk-21.0.5.0.10-3.el8.alma.1.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.5.0.10-3.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">c164fff68441553f2bc37837031ba317984fad848203f356b8392cd9ff0bbd96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8359</id>
    <title>Moderate: python39:3.9 and python39-devel:3.9 security update</title>
    <issued date="2024-10-23 00:00:00"/>
    <updated date="2024-10-24 07:35:43"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 and python39-devel:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8359" id="RHSA-2024:8359" type="rhsa" title="RHSA-2024:8359"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8359.html" id="ALSA-2024:8359" type="self" title="ALSA-2024:8359"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020241023131949" context="0a5380d9" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-debug" version="3.9.20" release="1.module_el8.10.0+3902+1690be06" epoch="0" arch="s390x" src="python39-3.9.20-1.module_el8.10.0+3902+1690be06.src.rpm">
          <filename>python39-debug-3.9.20-1.module_el8.10.0+3902+1690be06.s390x.rpm</filename>
          <sum type="sha256">ae8ef7faf26bdf85c64caed0a2f79e6399498e269753f4a09e692d20eb7a3745</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8798</id>
    <title>Moderate: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2024-11-04 00:00:00"/>
    <updated date="2024-11-06 10:17:30"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8798" id="RHSA-2024:8798" type="rhsa" title="RHSA-2024:8798"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9632" id="CVE-2024-9632" type="cve" title="CVE-2024-9632"/>
      <reference href="https://bugzilla.redhat.com/2317233" id="2317233" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8798.html" id="ALSA-2024:8798" type="self" title="ALSA-2024:8798"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="25.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-25.el8_10.s390x.rpm</filename>
          <sum type="sha256">010dd8c79e7fb651a156389c84b0412d9e4830655e118956b8c56b9554480629</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="25.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-25.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-25.el8_10.noarch.rpm</filename>
          <sum type="sha256">5a3aaf5c4e2ae33f137d83a93d9beb20e9b5daead1ffa2fb603e9c3bc1a78c6c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8831</id>
    <title>Low: bcc security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:14:50"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Low</severity>
    <summary>bcc security update</summary>
    <description>BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.  

Security Fix(es):  

  * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8831" id="RHSA-2024:8831" type="rhsa" title="RHSA-2024:8831"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-2314" id="CVE-2024-2314" type="cve" title="CVE-2024-2314"/>
      <reference href="https://bugzilla.redhat.com/2269019" id="2269019" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8831.html" id="ALSA-2024:8831" type="self" title="ALSA-2024:8831"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bcc-doc" version="0.25.0" release="9.el8_10" epoch="0" arch="noarch" src="bcc-0.25.0-9.el8_10.src.rpm">
          <filename>bcc-doc-0.25.0-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">6870744d30cb6e752d3f47214e27923d84a25f8748705c1d5dc3a6bbc42308a8</sum>
        </package>
        <package name="bcc-devel" version="0.25.0" release="9.el8_10" epoch="0" arch="s390x" src="bcc-0.25.0-9.el8_10.src.rpm">
          <filename>bcc-devel-0.25.0-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">8de12c6421fe0be21583a8f544a0bb1035412055f8ba2850739f416b81a93327</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8833</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:13:19"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: NULL pointer dereference in tif_dirinfo.c (CVE-2024-7006)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8833" id="RHSA-2024:8833" type="rhsa" title="RHSA-2024:8833"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-7006" id="CVE-2024-7006" type="cve" title="CVE-2024-7006"/>
      <reference href="https://bugzilla.redhat.com/2302996" id="2302996" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8833.html" id="ALSA-2024:8833" type="self" title="ALSA-2024:8833"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="33.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-33.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-33.el8_10.s390x.rpm</filename>
          <sum type="sha256">afe78e39bbcdbb592d5b64fabbf286eb9f8a5dd64c28234f5a64735ac25235d1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8836</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:10:20"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. For the unversioned "python" executable, see manual page "unversioned-python".  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8836" id="RHSA-2024:8836" type="rhsa" title="RHSA-2024:8836"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8836.html" id="ALSA-2024:8836" type="self" title="ALSA-2024:8836"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-idle" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7ef076c56333f388bc81f6bf0d62d51d40674e25b35911ca59e3a12e9c466f7c</sum>
        </package>
        <package name="python3.12-test" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b2a5bf98db40bf8588e2ca53fbba3abca75fce312ca6ceae2ab00da568bac25c</sum>
        </package>
        <package name="python3.12-debug" version="3.12.6" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.6-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.6-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">b8dc3bd7873e95ad388390aced910061c0454dac8635381c67b5551ce0de61cf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8838</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 10:08:24"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8838" id="RHSA-2024:8838" type="rhsa" title="RHSA-2024:8838"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-6232" id="CVE-2024-6232" type="cve" title="CVE-2024-6232"/>
      <reference href="https://bugzilla.redhat.com/2309426" id="2309426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8838.html" id="ALSA-2024:8838" type="self" title="ALSA-2024:8838"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">24bd38cc2ab997efa77e6844aa799d57872214d261655036ace650bfb97886b4</sum>
        </package>
        <package name="python3.11-test" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6760e9f8eeef5d2051a00195b6e7dc77406c92e1d667e5ecb3e73b3eb9614b4d</sum>
        </package>
        <package name="python3.11-idle" version="3.11.10" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.10-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.10-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e0ecbc15b9b7967ed9e23d1b71bb5578556037462930ebc4586d079993b6dd69</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2024:8859</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2024-11-05 00:00:00"/>
    <updated date="2024-11-06 09:55:23"/>
    <rights>Copyright 2024 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.  

Security Fix(es):  

  * libexpat: Integer Overflow or Wraparound (CVE-2024-45491)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2024:8859" id="RHSA-2024:8859" type="rhsa" title="RHSA-2024:8859"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-45491" id="CVE-2024-45491" type="cve" title="CVE-2024-45491"/>
      <reference href="https://bugzilla.redhat.com/2308616" id="2308616" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2024-8859.html" id="ALSA-2024:8859" type="self" title="ALSA-2024:8859"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xmlrpc-c-c++" version="1.51.0" release="10.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-10.el8_10.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">91a445a6d32f67fbac9f03f744381784d9b17d014bf1a2453a10d9fa652191b7</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="10.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-10.el8_10.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">95d34b200571981f2bff02f76c3565188ddd1bf8a1b75456cbb593492357424d</sum>
        </package>
        <package name="xmlrpc-c-devel" version="1.51.0" release="10.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-10.el8_10.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-10.el8_10.s390x.rpm</filename>
          <sum type="sha256">a75ad0be8de016cd50b9ab41dbb393221fbd46ec4ac9bd8749e61b3005121a10</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0288</id>
    <title>Moderate: Bug fix of NetworkManager</title>
    <issued date="2025-01-13 00:00:00"/>
    <updated date="2025-01-13 21:27:07"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>Bug fix of NetworkManager</summary>
    <description>Security and Bug Fix(es):  

  * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)
  * Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:AlmaLinux-73051)
  * VPN connections do not support ipv4.routing-rules settings (JIRA:AlmaLinux-73052)


</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0288" id="RHSA-2025:0288" type="rhsa" title="RHSA-2025:0288"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-3661" id="CVE-2024-3661" type="cve" title="CVE-2024-3661"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0288.html" id="ALSA-2025:0288" type="self" title="ALSA-2025:0288"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="NetworkManager-libnm-devel" version="1.40.16" release="18.el8_10" epoch="1" arch="s390x" src="NetworkManager-1.40.16-18.el8_10.src.rpm">
          <filename>NetworkManager-libnm-devel-1.40.16-18.el8_10.s390x.rpm</filename>
          <sum type="sha256">4896ad0334736f051e7dcddfe2a5145f02e7311d89fd14f801d49d3be15e20de</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0314</id>
    <title>Important: raptor2 security update</title>
    <issued date="2025-01-14 00:00:00"/>
    <updated date="2025-01-15 13:08:37"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>raptor2 security update</summary>
    <description>Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.   

Security Fix(es):  

  * raptor: integer underflow when normalizing a URI with the turtle parser (CVE-2024-57823)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0314" id="RHSA-2025:0314" type="rhsa" title="RHSA-2025:0314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-57823" id="CVE-2024-57823" type="cve" title="CVE-2024-57823"/>
      <reference href="https://bugzilla.redhat.com/2336921" id="2336921" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0314.html" id="ALSA-2025:0314" type="self" title="ALSA-2025:0314"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="raptor2" version="2.0.15" release="17.el8_10" epoch="0" arch="s390x" src="raptor2-2.0.15-17.el8_10.src.rpm">
          <filename>raptor2-2.0.15-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">10497eaf4644e514a9b71bbd51e706fb76f7b3bfe84c410b5bd8c1b1b696c02b</sum>
        </package>
        <package name="raptor2-devel" version="2.0.15" release="17.el8_10" epoch="0" arch="s390x" src="raptor2-2.0.15-17.el8_10.src.rpm">
          <filename>raptor2-devel-2.0.15-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">b7acc17a3becd43e7f39b3405bab7f94461b375dbbafa0f6b0e0f229286221c4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0381</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:10:54"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.112 and .NET Runtime 8.0.1.12.  

Security Fix(es):  

  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0381" id="RHSA-2025:0381" type="rhsa" title="RHSA-2025:0381"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0381.html" id="ALSA-2025:0381" type="self" title="ALSA-2025:0381"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.112" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.112-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.112-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2c4c8e2568d4b68c4545a93a061eaa2b72f61527ae317207c0f0b75e4ee84489</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0382</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-01-16 00:00:00"/>
    <updated date="2025-01-17 21:07:21"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.102 and .NET Runtime 9.0.1.  

Security Fix(es):  

  * dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):  

  * dotnet: .NET Elevation of Privilege Vulnerability (CVE-2025-21173)
  * dotnet: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21176)
  * dotnet: .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2025-21172)
  * dotnet: .NET Remote Code Execution Vulnerability (CVE-2025-21171)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0382" id="RHSA-2025:0382" type="rhsa" title="RHSA-2025:0382"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21171" id="CVE-2025-21171" type="cve" title="CVE-2025-21171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21172" id="CVE-2025-21172" type="cve" title="CVE-2025-21172"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21173" id="CVE-2025-21173" type="cve" title="CVE-2025-21173"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21176" id="CVE-2025-21176" type="cve" title="CVE-2025-21176"/>
      <reference href="https://bugzilla.redhat.com/2337893" id="2337893" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337926" id="2337926" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337927" id="2337927" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2337958" id="2337958" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0382.html" id="ALSA-2025:0382" type="self" title="ALSA-2025:0382"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.102" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.102-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.102-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2a9af17cf6f464d1fdc4eddcc29afa8858179cdd60008bcb9841797d5691df6b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0422</id>
    <title>Moderate: java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 11:12:45"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update for AlmaLinux 8.6, 8.8, 8.10, 9.4 and 9.5</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


Bug Fix(es):  

  * The AlmaLinux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a new updated JDK. With this update, the JDK has been updated to use the latest version of copy-jdk-configs, which has been used for some years on later AlmaLinux versions (AlmaLinux-73867, AlmaLinux-73871, AlmaLinux-73872).


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0422" id="RHSA-2025:0422" type="rhsa" title="RHSA-2025:0422"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0422.html" id="ALSA-2025:0422" type="self" title="ALSA-2025:0422"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">03c94b5ca49f1028119f136a7f64e839117da57ca95f6bc1aaf786910addc4f5</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">30d0f3112d539becee9f5156f67b1464b4c2324a2ba8df4d06658e41e0a9f426</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">71b6ef8cf92b28938270ba93e37e3cb0f27d284ee840c660ed80401d19872c31</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">b47d4668a9273d54a69800420cfbc73fe4a960f34aba5bc5e5f1e12de26c3bfb</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">b674d118e65d0e24200d08457942a81f5ca72d4aeb6b64200f1931e7aaa93ff8</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">d92212f18bfbc596333859f86095dafc55528a77810644b8a828afc688259dd6</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.14.0.7" release="3.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.14.0.7-3.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.14.0.7-3.el8.s390x.rpm</filename>
          <sum type="sha256">dc8747783daaf0dbc7512febaa7a28e84e51376e7a60939783754de3be2c8e28</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:0426</id>
    <title>Moderate: java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</title>
    <issued date="2025-01-22 00:00:00"/>
    <updated date="2025-01-23 14:02:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update for AlmaLinux 8.10, 9.4 and 9.5</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance array handling (CVE-2025-21502)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:0426" id="RHSA-2025:0426" type="rhsa" title="RHSA-2025:0426"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21502" id="CVE-2025-21502" type="cve" title="CVE-2025-21502"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-0426.html" id="ALSA-2025:0426" type="self" title="ALSA-2025:0426"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">68b3e66338fe99d6a538641452010a9d54dcf27044fd1b7a51d0897c4d306cbd</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">98054dcf56366499a15b193b0c8919aa0a21290d161c43fb0ce59c1e13c16e05</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">b068892186945e518b6009d506a2618186a955075068bcc488a3ccf61f087c13</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">b454b5873bbf7d30033f432a004a57af540ffb1431cac8d8ecd96291e9b01b43</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">bf6d1df9f4ff05870765d047a7c3e6df9aec0a814aa69874ab1f1d1507108b93</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">d06b4e10e77769602b73442f8bbfaac19af95d90fc8a78c26661a340188d3f57</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.6.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.6.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.6.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">ddcb06ef38d3ab3613c306d567e74beaa704a76a2ee79c9c377467c5ad1e49d6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10026</id>
    <title>Important: python3.11 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:35:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10026" id="RHSA-2025:10026" type="rhsa" title="RHSA-2025:10026"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10026.html" id="ALSA-2025:10026" type="self" title="ALSA-2025:10026"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">450e037b356ac3f285653e3b17a4dad6be93e3c6ae00b4f3215fb8019d8528c8</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">be4f7c12bf5879dbd8aae5b671e7e9feef1946dc7efcaf696250f6deaef45a68</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="1.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-1.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c09761374e185535cd98b804888beca8488b707fcc2b5b287e1564592a9826da</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10031</id>
    <title>Important: python3.12 security update</title>
    <issued date="2025-07-01 00:00:00"/>
    <updated date="2025-07-01 19:39:24"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)
  * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10031" id="RHSA-2025:10031" type="rhsa" title="RHSA-2025:10031"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-12718" id="CVE-2024-12718" type="cve" title="CVE-2024-12718"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370013" id="2370013" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10031.html" id="ALSA-2025:10031" type="self" title="ALSA-2025:10031"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3b3135e84233df27761825f2b7a462f055ac6d8d8856d1d262fe95ebed607992</sum>
        </package>
        <package name="python3.12-idle" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">538ee1906550305f7e7e8ede8ba676d39e5123f4877f49d42941ffbc55e07a21</sum>
        </package>
        <package name="python3.12-debug" version="3.12.11" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.11-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ec0718b03dfce50b5931d25c4f161d685ca54be3e03a0f01f6da7698209beefd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10618</id>
    <title>Moderate: jq security update</title>
    <issued date="2025-07-08 00:00:00"/>
    <updated date="2025-07-09 08:08:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: jq has signed integer overflow in jv.c:jvp_array_write (CVE-2024-23337)
  * jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (CVE-2025-48060)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10618" id="RHSA-2025:10618" type="rhsa" title="RHSA-2025:10618"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-23337" id="CVE-2024-23337" type="cve" title="CVE-2024-23337"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48060" id="CVE-2025-48060" type="cve" title="CVE-2025-48060"/>
      <reference href="https://bugzilla.redhat.com/2367807" id="2367807" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2367842" id="2367842" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10618.html" id="ALSA-2025:10618" type="self" title="ALSA-2025:10618"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="jq-devel" version="1.6" release="11.el8_10" epoch="0" arch="s390x" src="jq-1.6-11.el8_10.src.rpm">
          <filename>jq-devel-1.6-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">a274bff045ea91e1d14cce1c9d6d1ac4acd29f94a5c5c08fed8c4bbba7d754c6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10867</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 12:47:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102668, AlmaLinux-102669, AlmaLinux-102670, AlmaLinux-102672)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10867" id="RHSA-2025:10867" type="rhsa" title="RHSA-2025:10867"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10867.html" id="ALSA-2025:10867" type="self" title="ALSA-2025:10867"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">0b455354a3b80756172aefc58972da66a5bb8a1118ce96472daa8911a351245e</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">2e3347e752bd77fb3a56eb796140f3f8a2f79384623c0d2b729947161ef0d00a</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">473550cffa80cb3a6289e7a53f95f09634db4372977d2d9720939d84fe23801a</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">63481652c94a7de2c395985e597d5da1246c77fc404ad111fcec1f541573fba4</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">893ad050f028bb3580e5df6fd9afd490851d47c26548e520a3e0e2c211073824</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">9ef0f23226ebb0b195bb1471bde8765c0ea8baa6bd4dbc854c94cae223c616f3</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.16.0.8" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.16.0.8-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.16.0.8-2.el8.s390x.rpm</filename>
          <sum type="sha256">a8c1db424b88a1bbee53f1862d5232d94a2e116aac639f0aa039e4d83b1c749d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:10873</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-30 13:16:02"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better Glyph drawing (CVE-2025-30749)
  * JDK: Enhance TLS protocol support (CVE-2025-30754)
  * JDK: Improve HTTP client header handling (CVE-2025-50059)
  * JDK: Better Glyph drawing redux (CVE-2025-50106)


Bug Fix(es):  

  * In AlmaLinuxand AlmaLinux systems, the default graphical display system is Wayland. The use of Wayland in these systems causes a failure in the traditional X11 method that java.awt.Robot uses to take a screen capture, producing a blank image. With this update, the RPM now recommends installing the PipeWire package, which the JDK can use to take screen captures in Wayland systems (AlmaLinux-102683, AlmaLinux-102684, AlmaLinux-102685)
  * On NUMA systems, the operating system can choose to migrate a task from one NUMA node to another. In the G1 garbage collector, G1AllocRegion objects are associated with NUMA nodes. The G1Allocator code assumes that obtaining the G1AllocRegion object for the current thread is sufficient, but OS scheduling can lead to arbitrary changes in the NUMA-to-thread association. This can cause crashes when the G1AllocRegion being used changes mid-operation. This update resolves this issue by always using the same NUMA node and associated G1AllocRegion object throughout an operation. (AlmaLinux-90307, AlmaLinux-90308, AlmaLinux-90311)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:10873" id="RHSA-2025:10873" type="rhsa" title="RHSA-2025:10873"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30749" id="CVE-2025-30749" type="cve" title="CVE-2025-30749"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30754" id="CVE-2025-30754" type="cve" title="CVE-2025-30754"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50059" id="CVE-2025-50059" type="cve" title="CVE-2025-50059"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-50106" id="CVE-2025-50106" type="cve" title="CVE-2025-50106"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-10873.html" id="ALSA-2025:10873" type="self" title="ALSA-2025:10873"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">0c01ebb58511bd4347d3f6718a8a2a24dfdf7bcb9d430cf30b28626624159c40</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">1b2de5e1b8082812c6e7cd9d195081bd4d8c19f5328d554e6ea2b219ed21c0a9</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">358a54913621e9bd1e2ff624d4aa86cf0bc72bcc20cd6986a2692523fbcdb5c1</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">616ca6e80f6e244eab0f5bf332a5b1722520b0d0b1cbcbc79d0eb8b216a6f9ed</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">9be6d4e9e726f86713d633113c7efc6af4376b8a4f2c53e19ba946657501eced</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">ab925fa555e5732e45093a1b3086e7acab4169792fb5e559fa35deecc24a1623</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.8.0.9" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.8.0.9-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.8.0.9-1.el8.s390x.rpm</filename>
          <sum type="sha256">d003d968e569534bfb83151813761b4cb37dab41b9c46bbdbcc1e2892b532981</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11043</id>
    <title>Moderate: python3.11-setuptools security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 08:02:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11043" id="RHSA-2025:11043" type="rhsa" title="RHSA-2025:11043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11043.html" id="ALSA-2025:11043" type="self" title="ALSA-2025:11043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-setuptools" version="65.5.1" release="4.el8_10" epoch="0" arch="noarch" src="python3.11-setuptools-65.5.1-4.el8_10.src.rpm">
          <filename>python3.11-setuptools-65.5.1-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">6df6d59f2f9267b05ef9fd14a0944b97af787070de2a37ea0b3aebbac325a693</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11044</id>
    <title>Moderate: python3.12-setuptools security update</title>
    <issued date="2025-07-15 00:00:00"/>
    <updated date="2025-07-16 08:04:17"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12-setuptools security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11044" id="RHSA-2025:11044" type="rhsa" title="RHSA-2025:11044"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11044.html" id="ALSA-2025:11044" type="self" title="ALSA-2025:11044"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-setuptools-wheel" version="68.2.2" release="5.el8_10" epoch="0" arch="noarch" src="python3.12-setuptools-68.2.2-5.el8_10.src.rpm">
          <filename>python3.12-setuptools-wheel-68.2.2-5.el8_10.noarch.rpm</filename>
          <sum type="sha256">64612e0e5d89fbd540960000f37a0f318415f1797296b3d39297030f9dfac930</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:11327</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2025-07-16 00:00:00"/>
    <updated date="2025-07-17 08:13:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib2: Signal subscription vulnerabilities (CVE-2024-34397)
  * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
  * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar (CVE-2025-4373)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:11327" id="RHSA-2025:11327" type="rhsa" title="RHSA-2025:11327"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-34397" id="CVE-2024-34397" type="cve" title="CVE-2024-34397"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-52533" id="CVE-2024-52533" type="cve" title="CVE-2024-52533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4373" id="CVE-2025-4373" type="cve" title="CVE-2025-4373"/>
      <reference href="https://bugzilla.redhat.com/2279632" id="2279632" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325340" id="2325340" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2364265" id="2364265" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-11327.html" id="ALSA-2025:11327" type="self" title="ALSA-2025:11327"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glib2-static" version="2.56.4" release="166.el8_10" epoch="0" arch="s390x" src="glib2-2.56.4-166.el8_10.src.rpm">
          <filename>glib2-static-2.56.4-166.el8_10.s390x.rpm</filename>
          <sum type="sha256">71ab004475281fe80509092ca3c5ff13d41c458ca52a326020c2b32da5294cf8</sum>
        </package>
        <package name="glib2-doc" version="2.56.4" release="166.el8_10" epoch="0" arch="noarch" src="glib2-2.56.4-166.el8_10.src.rpm">
          <filename>glib2-doc-2.56.4-166.el8_10.noarch.rpm</filename>
          <sum type="sha256">cd7b24af810ed5ff7814e409ed064913efea73f0690475989bc3286481715993</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12527</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2025-08-04 00:00:00"/>
    <updated date="2026-04-09 14:57:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12527" id="RHSA-2025:12527" type="rhsa" title="RHSA-2025:12527"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49133" id="CVE-2025-49133" type="cve" title="CVE-2025-49133"/>
      <reference href="https://bugzilla.redhat.com/2371585" id="2371585" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12527.html" id="ALSA-2025:12527" type="self" title="ALSA-2025:12527"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="53.module_el8.10.0+4031+06966654.4" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4031+06966654.4.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-53.module_el8.10.0+4031+06966654.4.s390x.rpm</filename>
          <sum type="sha256">6188e4b62b0c71463d1982b692792694ff2fc50156b945788034cb764dc39ae1</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">90ccfe2af537cb98179d4dbf1907af3506728fa8c2748d797958d22c7e889dc5</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">e62f8c5d04ef78db7902103af065899d2ac4ac49c260f604c7f99ec07f06de7b</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:12980</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-06 14:24:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: Double free in glibc (CVE-2025-8058)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:12980" id="RHSA-2025:12980" type="rhsa" title="RHSA-2025:12980"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8058" id="CVE-2025-8058" type="cve" title="CVE-2025-8058"/>
      <reference href="https://bugzilla.redhat.com/2383146" id="2383146" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-12980.html" id="ALSA-2025:12980" type="self" title="ALSA-2025:12980"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.25" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">a434095b973ad469b2b3e79dcce0f645c89963ba850bdc4f58f02ae32a4cc656</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.25" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">e5519af569429a6e95027fa2b36bb41c160b1343d08bccff8b7353999395f4f4</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.25" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">e7b6d35ecf4b8dbe798d993b45a6f6da222031eede7ab225a67213a59c408771</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.25" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.25.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.25.s390x.rpm</filename>
          <sum type="sha256">e96e942ecf77d10feda090e62360b7b8751d86146be0dc870b2567122b5d34e2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1301</id>
    <title>Moderate: gcc security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-17 07:23:53"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gcc security update</summary>
    <description>The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.  

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1301" id="RHSA-2025:1301" type="rhsa" title="RHSA-2025:1301"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1301.html" id="ALSA-2025:1301" type="self" title="ALSA-2025:1301"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libstdc++-static" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>libstdc++-static-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">1fc4fc3d7a4c90ca24c745672ebf860b1a8b29d681f1319af5547c327e8c3800</sum>
        </package>
        <package name="gcc-plugin-devel" version="8.5.0" release="23.el8_10.alma.1" epoch="0" arch="s390x" src="gcc-8.5.0-23.el8_10.alma.1.src.rpm">
          <filename>gcc-plugin-devel-8.5.0-23.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">bfbe3407e1a011455e8a5c5663250e14cc97cdd7f85e52086db77715bb0aceb0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1314</id>
    <title>Moderate: doxygen security update</title>
    <issued date="2025-02-11 00:00:00"/>
    <updated date="2025-02-13 11:23:34"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>doxygen security update</summary>
    <description>Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files.   

Security Fix(es):  

  * jquery: Untrusted code execution via &lt;option&gt; tag in HTML passed to DOM manipulation methods (CVE-2020-11023)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1314" id="RHSA-2025:1314" type="rhsa" title="RHSA-2025:1314"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-11023" id="CVE-2020-11023" type="cve" title="CVE-2020-11023"/>
      <reference href="https://bugzilla.redhat.com/1850004" id="1850004" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1314.html" id="ALSA-2025:1314" type="self" title="ALSA-2025:1314"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="doxygen-doxywizard" version="1.8.14" release="13.el8_10" epoch="1" arch="s390x" src="doxygen-1.8.14-13.el8_10.src.rpm">
          <filename>doxygen-doxywizard-1.8.14-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">44a88b462e9a4b4fa997f32a11daea2f09db75553f1138f1f28bf18d0d6fc32a</sum>
        </package>
        <package name="doxygen" version="1.8.14" release="13.el8_10" epoch="1" arch="s390x" src="doxygen-1.8.14-13.el8_10.src.rpm">
          <filename>doxygen-1.8.14-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">911fd90a33cb8c54d7e0e7461530c28fa162ae4b011cf5c1fff31ecbf587cbb0</sum>
        </package>
        <package name="doxygen-latex" version="1.8.14" release="13.el8_10" epoch="1" arch="s390x" src="doxygen-1.8.14-13.el8_10.src.rpm">
          <filename>doxygen-latex-1.8.14-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">f259b129c9c7e9a9064a3bf8e950ef89f34766c75f9392cbc1a4f49e3cc72e64</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:13315</id>
    <title>Moderate: gdk-pixbuf2 security update</title>
    <issued date="2025-08-07 00:00:00"/>
    <updated date="2025-08-07 09:27:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf (CVE-2025-7345)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:13315" id="RHSA-2025:13315" type="rhsa" title="RHSA-2025:13315"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-7345" id="CVE-2025-7345" type="cve" title="CVE-2025-7345"/>
      <reference href="https://bugzilla.redhat.com/2377063" id="2377063" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-13315.html" id="ALSA-2025:13315" type="self" title="ALSA-2025:13315"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="7.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-7.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">2cb42a894834484b0ff6b075ca8162877a382c1b984fc38a365ef4311230579e</sum>
        </package>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="7.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-7.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">56e42deaf0b5fee5077f31f894c95bf52b381afff518390bdbed94351515a2db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14101</id>
    <title>Important: mingw-sqlite security update</title>
    <issued date="2025-08-19 00:00:00"/>
    <updated date="2025-08-20 12:24:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-sqlite security update</summary>
    <description>SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the administrative hassles of supporting a separate database server. Version 2 and version 3 binaries are named to permit each to be installed on a single host This package contains cross-compiled libraries and development tools for Windows.  

Security Fix(es):  

  * sqlite: Integer Truncation in SQLite (CVE-2025-6965)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14101" id="RHSA-2025:14101" type="rhsa" title="RHSA-2025:14101"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6965" id="CVE-2025-6965" type="cve" title="CVE-2025-6965"/>
      <reference href="https://bugzilla.redhat.com/2380149" id="2380149" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14101.html" id="ALSA-2025:14101" type="self" title="ALSA-2025:14101"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw32-sqlite-static" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw32-sqlite-static-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">7323fb9f9e1d8d21a3d5620a81ca2ecab439109fa488410977b587247e50886a</sum>
        </package>
        <package name="mingw64-sqlite" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw64-sqlite-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">978019774a040c094a8e4f831a7eb3e95b7a10b064c8bbd7d90a8192a74f78d2</sum>
        </package>
        <package name="mingw64-sqlite-static" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw64-sqlite-static-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">a37c7a190566005606b0e93d38d77c08f45b5fc99a07ecfa4e20e3fcbc71c934</sum>
        </package>
        <package name="mingw32-sqlite" version="3.26.0.0" release="2.el8_10" epoch="0" arch="noarch" src="mingw-sqlite-3.26.0.0-2.el8_10.src.rpm">
          <filename>mingw32-sqlite-3.26.0.0-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">ec826a4ee6bd5fd099baeab1442cc4544d8b9ac86a69c6339f4fcaaa7439e5dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14135</id>
    <title>Important: libarchive security update</title>
    <issued date="2025-08-20 00:00:00"/>
    <updated date="2025-08-21 05:47:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c (CVE-2025-5914)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14135" id="RHSA-2025:14135" type="rhsa" title="RHSA-2025:14135"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5914" id="CVE-2025-5914" type="cve" title="CVE-2025-5914"/>
      <reference href="https://bugzilla.redhat.com/2370861" id="2370861" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14135.html" id="ALSA-2025:14135" type="self" title="ALSA-2025:14135"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libarchive-devel" version="3.3.3" release="6.el8_10" epoch="0" arch="s390x" src="libarchive-3.3.3-6.el8_10.src.rpm">
          <filename>libarchive-devel-3.3.3-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">e4135c14b76d8fe86889cfe73a9758aa583c90839f77bed96d3836f557ba86a9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14546</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-09-04 09:38:52"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14546" id="RHSA-2025:14546" type="rhsa" title="RHSA-2025:14546"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14546.html" id="ALSA-2025:14546" type="self" title="ALSA-2025:14546"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">226a142c235c0631fea9667ea35701a02ca3630fe1241de5647a2161de33270f</sum>
        </package>
        <package name="python3.12-idle" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">b648b65276a682a806bde6c2708264eb2940b217d63fdc94d346b37779530884</sum>
        </package>
        <package name="python3.12-debug" version="3.12.11" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.11-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.11-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">fa790c4ccb06a66017146ad8a6fff324df6403cd6f7161b6de06066299766b05</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14841</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-08-29 06:51:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14841" id="RHSA-2025:14841" type="rhsa" title="RHSA-2025:14841"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14841.html" id="ALSA-2025:14841" type="self" title="ALSA-2025:14841"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-idle" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">2c89e9e251260c6bf56d96709678e4a800ea59042e72b399f4e6b004eef65c83</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">732848e3d296bd7883860cc03cd322b008499a78b2bc7d32c8c7ff24810f63a3</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-2.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">cb6f425afc4573ebb09f3f1088b331b4cd01e827e33224c42e5d5a595058abca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:14900</id>
    <title>Moderate: python39:3.9 security update</title>
    <issued date="2025-08-28 00:00:00"/>
    <updated date="2025-09-01 12:34:14"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * setuptools: Path Traversal Vulnerability in setuptools PackageIndex (CVE-2025-47273)
  * cpython: Cpython infinite loop when parsing a tarfile (CVE-2025-8194)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:14900" id="RHSA-2025:14900" type="rhsa" title="RHSA-2025:14900"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47273" id="CVE-2025-47273" type="cve" title="CVE-2025-47273"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8194" id="CVE-2025-8194" type="cve" title="CVE-2025-8194"/>
      <reference href="https://bugzilla.redhat.com/2366982" id="2366982" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2384043" id="2384043" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-14900.html" id="ALSA-2025:14900" type="self" title="ALSA-2025:14900"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020250829123218" context="0a5380d9" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-debug" version="3.9.20" release="2.module_el8.10.0+4040+9207bbc0" epoch="0" arch="s390x" src="python39-3.9.20-2.module_el8.10.0+4040+9207bbc0.src.rpm">
          <filename>python39-debug-3.9.20-2.module_el8.10.0+4040+9207bbc0.s390x.rpm</filename>
          <sum type="sha256">56b1229bbe4d928d07d59535bde3a4c1116f7cf5184f7da2ab6c8d0696b9eaab</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:15017</id>
    <title>Important: udisks2 security update</title>
    <issued date="2025-09-02 00:00:00"/>
    <updated date="2025-09-29 09:15:48"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>udisks2 security update</summary>
    <description>The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies.  

Security Fix(es):  

  * udisks: Out-of-bounds read in UDisks Daemon (CVE-2025-8067)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:15017" id="RHSA-2025:15017" type="rhsa" title="RHSA-2025:15017"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8067" id="CVE-2025-8067" type="cve" title="CVE-2025-8067"/>
      <reference href="https://bugzilla.redhat.com/2388623" id="2388623" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-15017.html" id="ALSA-2025:15017" type="self" title="ALSA-2025:15017"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libudisks2-devel" version="2.9.0" release="16.el8_10.1" epoch="0" arch="s390x" src="udisks2-2.9.0-16.el8_10.1.src.rpm">
          <filename>libudisks2-devel-2.9.0-16.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">5cf966d60de4d42debb2898dfee8dd95a9fbf01e5b6c6a3f742426035b4b104b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:1676</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2025-02-19 00:00:00"/>
    <updated date="2025-02-20 11:18:59"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:1676" id="RHSA-2025:1676" type="rhsa" title="RHSA-2025:1676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11187" id="CVE-2024-11187" type="cve" title="CVE-2024-11187"/>
      <reference href="https://bugzilla.redhat.com/2342879" id="2342879" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-1676.html" id="ALSA-2025:1676" type="self" title="ALSA-2025:1676"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">2dd8965ca8ca03cd0a8e3a70b3b1d0183fc349fbef69505c045d98fcec9c05a0</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.2" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.2.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.2.noarch.rpm</filename>
          <sum type="sha256">6474ce4336d73b99e38bfc6fe8e03b94f8583a72b9219a71456f817cb86aa4f1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:17163</id>
    <title>Moderate: perl-JSON-XS security update</title>
    <issued date="2025-10-01 00:00:00"/>
    <updated date="2025-10-20 12:34:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>perl-JSON-XS security update</summary>
    <description>This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C.  

Security Fix(es):  

  * JSON-XS: integer buffer overflow causing a segfault when parsing crafted JSON (CVE-2025-40928)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:17163" id="RHSA-2025:17163" type="rhsa" title="RHSA-2025:17163"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40928" id="CVE-2025-40928" type="cve" title="CVE-2025-40928"/>
      <reference href="https://bugzilla.redhat.com/2393878" id="2393878" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-17163.html" id="ALSA-2025:17163" type="self" title="ALSA-2025:17163"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="perl-JSON-XS" version="3.04" release="4.el8_10" epoch="1" arch="s390x" src="perl-JSON-XS-3.04-4.el8_10.src.rpm">
          <filename>perl-JSON-XS-3.04-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">87a41cb0fd1c351ab79219b99f246b321b0a3a67f053b88a49241db31c6cec98</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18148</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-20 12:10:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.121 and .NET Runtime 8.0.21.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18148" id="RHSA-2025:18148" type="rhsa" title="RHSA-2025:18148"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18148.html" id="ALSA-2025:18148" type="self" title="ALSA-2025:18148"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.121" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.121-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.121-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">2fa6e06da2c3d052703410f2fb953c0ef658afd29b2ff716d387b690d29eea0f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18150</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-11-03 08:55:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.111 and .NET Runtime 9.0.10.Security Fix(es):  

  * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
  * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
  * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18150" id="RHSA-2025:18150" type="rhsa" title="RHSA-2025:18150"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55247" id="CVE-2025-55247" type="cve" title="CVE-2025-55247"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55248" id="CVE-2025-55248" type="cve" title="CVE-2025-55248"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-55315" id="CVE-2025-55315" type="cve" title="CVE-2025-55315"/>
      <reference href="https://bugzilla.redhat.com/2403083" id="2403083" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403085" id="2403085" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2403086" id="2403086" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18150.html" id="ALSA-2025:18150" type="self" title="ALSA-2025:18150"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.111" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.111-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.111-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">38fad8772b79bee309e60e869619bf552d379eecfeef02074e7e8b9103069725</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18821</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:28:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)


Bug Fix(es):  

  * Since the 8.8 release of AlmaLinuxand the 9.2 release of AlmaLinux OpenJDK 17 has used a single build repackaged for each major AlmaLinux release. With this release, this same build is now also used by the following older releases: 8.4, 8.6 and 9.0 (AlmaLinux-118788, AlmaLinux-118789, AlmaLinux-118792)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18821" id="RHSA-2025:18821" type="rhsa" title="RHSA-2025:18821"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18821.html" id="ALSA-2025:18821" type="self" title="ALSA-2025:18821"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">054d3bcd6161829c13f3ac905e5e47d495f6b187d3f782cbe56abffd76b0209d</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">156d7d042d8e8c995122ed17a517e071c9ed7d50a710a18ecb9061814782a1a8</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">1f6e990f5108993b749fea656260b7a9339f1f1b41c1020eac94bff15ce511cb</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">6b54f53416c70e7ab47e22548a8c93c436dde8c85ec1a3df1acf82a682a5fdf8</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">9a5905579367808ad80347e516f33befef945e60a92ee443c93b838c509b6c5c</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">cb00b70e13df5fce18d3aba01268d3b07e4108f9d4cb5fd7ec6df9beb6bf55b5</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.17.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.17.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.17.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">d5683162f81d8f5dc8929ed3b8c9656103750f866bcc646e229c886be0bccc96</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:18824</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-10-22 00:00:00"/>
    <updated date="2025-10-30 07:18:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance Path Factories (CVE-2025-53066)
  * JDK: Enhance Certificate Handling (CVE-2025-53057)
  * JDK: Enhance String Handling (CVE-2025-61748)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:18824" id="RHSA-2025:18824" type="rhsa" title="RHSA-2025:18824"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53057" id="CVE-2025-53057" type="cve" title="CVE-2025-53057"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-53066" id="CVE-2025-53066" type="cve" title="CVE-2025-53066"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-61748" id="CVE-2025-61748" type="cve" title="CVE-2025-61748"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-18824.html" id="ALSA-2025:18824" type="self" title="ALSA-2025:18824"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">35996447dc4acfcbd814a4cafe742ca53e170c6e27914e7fcabae6765b400feb</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">67081feb0b714d9015d4621d8a0efcbc03fee212d16a4227fff2877285a2c0bb</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">7a12780a0935a7eee51eaf0aa6886fa3c29157d3cf4d0c67245880f832676d44</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">80cdf0c334e450cc48d0d41bae9574cdc4c1f7edb3e55722c39813b23393c7b8</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">dfd02e0af4ea94b3a3f61d9c2c931a4442b363fd5e098ccfa3879fcda017cb71</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">e8bc6d8ab7493050d03be42acad1358fe039c1dce8693a8ffda6835570ca56b6</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.9.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.9.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.9.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">fb6bdf92b7a6b62b7b5858cdfaeaa295354c553e21d808f7e6a45d3bc9ffdd2d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19276</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-10-29 00:00:00"/>
    <updated date="2025-10-31 08:23:08"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19276" id="RHSA-2025:19276" type="rhsa" title="RHSA-2025:19276"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19276.html" id="ALSA-2025:19276" type="self" title="ALSA-2025:19276"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="35.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-35.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-35.el8_10.s390x.rpm</filename>
          <sum type="sha256">741d379acfd7d873a746effbe3c024437cefb9f4f9b92a39e85b8be604c5ea9f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19434</id>
    <title>Moderate: xorg-x11-server security update</title>
    <issued date="2025-11-03 00:00:00"/>
    <updated date="2026-01-05 21:05:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
  * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
  * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19434" id="RHSA-2025:19434" type="rhsa" title="RHSA-2025:19434"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62229" id="CVE-2025-62229" type="cve" title="CVE-2025-62229"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62230" id="CVE-2025-62230" type="cve" title="CVE-2025-62230"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-62231" id="CVE-2025-62231" type="cve" title="CVE-2025-62231"/>
      <reference href="https://bugzilla.redhat.com/2402649" id="2402649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402653" id="2402653" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402660" id="2402660" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19434.html" id="ALSA-2025:19434" type="self" title="ALSA-2025:19434"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-devel" version="1.20.11" release="27.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-27.el8_10.s390x.rpm</filename>
          <sum type="sha256">871bae1a4fcf1f42d8c460fdba95e142467e5c471654bb8f963cfe5eb4152c2b</sum>
        </package>
        <package name="xorg-x11-server-source" version="1.20.11" release="27.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-27.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-27.el8_10.noarch.rpm</filename>
          <sum type="sha256">8b68ad08bfe54bac581b29ef622bada1357a6f2b1647c8c5c778e55aa6120328</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19610</id>
    <title>Important: sssd security update</title>
    <issued date="2025-11-04 00:00:00"/>
    <updated date="2025-11-07 09:12:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>sssd security update</summary>
    <description>The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.  

Security Fix(es):  

  * sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems (CVE-2025-11561)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19610" id="RHSA-2025:19610" type="rhsa" title="RHSA-2025:19610"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11561" id="CVE-2025-11561" type="cve" title="CVE-2025-11561"/>
      <reference href="https://bugzilla.redhat.com/2402727" id="2402727" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19610.html" id="ALSA-2025:19610" type="self" title="ALSA-2025:19610"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libsss_nss_idmap-devel" version="2.9.4" release="5.el8_10.3" epoch="0" arch="s390x" src="sssd-2.9.4-5.el8_10.3.src.rpm">
          <filename>libsss_nss_idmap-devel-2.9.4-5.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">a891b87de3a37ed5b049fac9f4df7bbc55b0f4a73d2c753666db590d661ac6bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19793</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2025-11-05 00:00:00"/>
    <updated date="2025-11-07 08:06:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19793" id="RHSA-2025:19793" type="rhsa" title="RHSA-2025:19793"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40778" id="CVE-2025-40778" type="cve" title="CVE-2025-40778"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40780" id="CVE-2025-40780" type="cve" title="CVE-2025-40780"/>
      <reference href="https://bugzilla.redhat.com/2405827" id="2405827" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2405829" id="2405829" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19793.html" id="ALSA-2025:19793" type="self" title="ALSA-2025:19793"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.4.noarch.rpm</filename>
          <sum type="sha256">4bdbb98cccc6fce8e5a1768731bbc866608c3ed4edcd04311512f61540233cbe</sum>
        </package>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.4" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.4.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.4.s390x.rpm</filename>
          <sum type="sha256">ca96a806be37ce8b235831f37a87c9fd1da099e1fcc0176b4c5cb7ffbae4619a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:19906</id>
    <title>Important: mingw-libtiff security update</title>
    <issued date="2025-11-06 00:00:00"/>
    <updated date="2025-11-07 13:28:57"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-libtiff security update</summary>
    <description>The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
  * libtiff: Libtiff Write-What-Where (CVE-2025-9900)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:19906" id="RHSA-2025:19906" type="rhsa" title="RHSA-2025:19906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-9900" id="CVE-2025-9900" type="cve" title="CVE-2025-9900"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2392784" id="2392784" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-19906.html" id="ALSA-2025:19906" type="self" title="ALSA-2025:19906"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw32-libtiff-static" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw32-libtiff-static-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">5cf075fe8cc92a6739b592c63f76da75791eb194d8f5ce3c1d4d8c5c962f1f49</sum>
        </package>
        <package name="mingw32-libtiff" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw32-libtiff-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">7a10ae15a755902afe8304eb53b8894f0754a9f2174c9bdf0af2efb0c115e3cf</sum>
        </package>
        <package name="mingw64-libtiff-static" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw64-libtiff-static-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">82e574e73a6cdcff6673fbc675e7e887a089bfb39fcb7ef7d858fea74b7fc816</sum>
        </package>
        <package name="mingw64-libtiff" version="4.0.9" release="3.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-3.el8_10.src.rpm">
          <filename>mingw64-libtiff-4.0.9-3.el8_10.noarch.rpm</filename>
          <sum type="sha256">cfe615c289127f7a88ccf0a681064865ef14aa0395b13642395c16dfb96e69eb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:20034</id>
    <title>Important: libtiff security update</title>
    <issued date="2025-11-10 00:00:00"/>
    <updated date="2025-11-11 12:31:43"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:20034" id="RHSA-2025:20034" type="rhsa" title="RHSA-2025:20034"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8176" id="CVE-2025-8176" type="cve" title="CVE-2025-8176"/>
      <reference href="https://bugzilla.redhat.com/2383598" id="2383598" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-20034.html" id="ALSA-2025:20034" type="self" title="ALSA-2025:20034"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="36.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-36.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-36.el8_10.s390x.rpm</filename>
          <sum type="sha256">2675a32c96ed6c2e8679dfbb521860d4e497b248b5cf02291aa1837ee8ad04ed</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21628</id>
    <title>Critical: lasso security update</title>
    <issued date="2025-11-17 00:00:00"/>
    <updated date="2025-11-19 10:11:06"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Critical</severity>
    <summary>lasso security update</summary>
    <description>The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.  

Security Fix(es):  

  * lasso: Type confusion in Entr'ouvert Lasso (CVE-2025-47151)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21628" id="RHSA-2025:21628" type="rhsa" title="RHSA-2025:21628"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-47151" id="CVE-2025-47151" type="cve" title="CVE-2025-47151"/>
      <reference href="https://bugzilla.redhat.com/2412739" id="2412739" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21628.html" id="ALSA-2025:21628" type="self" title="ALSA-2025:21628"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="lasso-devel" version="2.6.0" release="14.el8_10" epoch="0" arch="s390x" src="lasso-2.6.0-14.el8_10.src.rpm">
          <filename>lasso-devel-2.6.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">252b7094ce0a53379d489860ad44f4727386809524010e87c89ec97102d7e226</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:21974</id>
    <title>Important: mingw-expat security update</title>
    <issued date="2025-11-24 00:00:00"/>
    <updated date="2025-12-01 07:55:50"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-expat security update</summary>
    <description>Expat is a C library for parsing XML documents. The mingw-expat packages provide a port of the Expat library for MinGW.   

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:21974" id="RHSA-2025:21974" type="rhsa" title="RHSA-2025:21974"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-21974.html" id="ALSA-2025:21974" type="self" title="ALSA-2025:21974"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw32-expat" version="2.5.0" release="1.el8_10" epoch="0" arch="noarch" src="mingw-expat-2.5.0-1.el8_10.src.rpm">
          <filename>mingw32-expat-2.5.0-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">2ba234b8ca9964afd438ce2fea53efad99e8c94a4b49aca5802789f500cc9d10</sum>
        </package>
        <package name="mingw64-expat" version="2.5.0" release="1.el8_10" epoch="0" arch="noarch" src="mingw-expat-2.5.0-1.el8_10.src.rpm">
          <filename>mingw64-expat-2.5.0-1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3fd086856eb4851f1782df7a68359e23644b631f26b1ab3556610f4b8cd7956e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:23530</id>
    <title>Important: python39:3.9 security update</title>
    <issued date="2025-12-17 00:00:00"/>
    <updated date="2025-12-22 14:09:11"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python39:3.9 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)
  * python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)
  * python: Improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168)
  * python: cpython: URL parser allowed square brackets in domain names (CVE-2025-0938)
  * cpython: python: CPython DecodeError Handling Vulnerability (CVE-2025-4516)
  * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
  * cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
  * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
  * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory (CVE-2025-4138)
  * cpython: Python HTMLParser quadratic complexity (CVE-2025-6069)
  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:23530" id="RHSA-2025:23530" type="rhsa" title="RHSA-2025:23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-11168" id="CVE-2024-11168" type="cve" title="CVE-2024-11168"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-5642" id="CVE-2024-5642" type="cve" title="CVE-2024-5642"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-9287" id="CVE-2024-9287" type="cve" title="CVE-2024-9287"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0938" id="CVE-2025-0938" type="cve" title="CVE-2025-0938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4138" id="CVE-2025-4138" type="cve" title="CVE-2025-4138"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4330" id="CVE-2025-4330" type="cve" title="CVE-2025-4330"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4435" id="CVE-2025-4435" type="cve" title="CVE-2025-4435"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4516" id="CVE-2025-4516" type="cve" title="CVE-2025-4516"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4517" id="CVE-2025-4517" type="cve" title="CVE-2025-4517"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6069" id="CVE-2025-6069" type="cve" title="CVE-2025-6069"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2294682" id="2294682" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2321440" id="2321440" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325776" id="2325776" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2343237" id="2343237" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2366509" id="2366509" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370010" id="2370010" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370014" id="2370014" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2370016" id="2370016" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2372426" id="2372426" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2373234" id="2373234" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-23530.html" id="ALSA-2025:23530" type="self" title="ALSA-2025:23530"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="python39" stream="3.9" version="8100020251218093243" context="0a5380d9" arch="s390x"/>
        <package name="python39-pybind11-devel" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-devel-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">063584fa1c141e7a180e82f9e4d90aff07a3ce585bf334c8851302cc8324b3a4</sum>
        </package>
        <package name="python39-Cython" version="0.29.21" release="5.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-Cython-0.29.21-5.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">7ac20861dd83b2a7e6204cbe102ea187f1110adb9e22f76000a22a4bed4aa5e8</sum>
        </package>
        <package name="python39-debug" version="3.9.25" release="2.module_el8.10.0+4083+53cad1fb" epoch="0" arch="s390x" src="python39-3.9.25-2.module_el8.10.0+4083+53cad1fb.src.rpm">
          <filename>python39-debug-3.9.25-2.module_el8.10.0+4083+53cad1fb.s390x.rpm</filename>
          <sum type="sha256">a43d3663fc7e4f5c151f4a43f577d1380d510f827e53a0b079bf7e36267b80f1</sum>
        </package>
        <package name="python39-pybind11" version="2.7.1" release="1.module_el8.6.0+3248+c431e88c" epoch="0" arch="s390x" src="pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.src.rpm">
          <filename>python39-pybind11-2.7.1-1.module_el8.6.0+3248+c431e88c.s390x.rpm</filename>
          <sum type="sha256">bc32e3b8d8186fb57c25119ea1362ebd91714054afede97c477c2cd75fee4309</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2667</id>
    <title>Important: .NET 9.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:23:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.104 and .NET Runtime 9.0.3.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2667" id="RHSA-2025:2667" type="rhsa" title="RHSA-2025:2667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2667.html" id="ALSA-2025:2667" type="self" title="ALSA-2025:2667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">1077531ae40c262a7b984585605a7a953f4c5051bdd68ae58fc31c214389b015</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:2670</id>
    <title>Important: .NET 8.0 security, bug fix, and enhancement update</title>
    <issued date="2025-03-11 00:00:00"/>
    <updated date="2025-03-17 22:29:28"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security, bug fix, and enhancement update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.114 and .NET Runtime 8.0.14.Security Fix(es):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (CVE-2025-24070)


Bug Fix(es) and Enhancement(s):  

  * dotnet: Privilege Escalation Vulnerability in .NET SignInManager.RefreshSignInAsync Method (BZ#2349733)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:2670" id="RHSA-2025:2670" type="rhsa" title="RHSA-2025:2670"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-24070" id="CVE-2025-24070" type="cve" title="CVE-2025-24070"/>
      <reference href="https://bugzilla.redhat.com/2349733" id="2349733" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-2670.html" id="ALSA-2025:2670" type="self" title="ALSA-2025:2670"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.114" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.114-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.114-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">61ad83ff751911ef9c6c6154d6f5390a8f964bf12f832e7ae2bb90753d055b9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3828</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-04-14 00:00:00"/>
    <updated date="2025-04-14 14:25:44"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: buffer overflow in the GNU C Library's assert() (CVE-2025-0395)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3828" id="RHSA-2025:3828" type="rhsa" title="RHSA-2025:3828"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-0395" id="CVE-2025-0395" type="cve" title="CVE-2025-0395"/>
      <reference href="https://bugzilla.redhat.com/2339460" id="2339460" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3828.html" id="ALSA-2025:3828" type="self" title="ALSA-2025:3828"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.16" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.16.s390x.rpm</filename>
          <sum type="sha256">5711800771bdca3d6b361182003335f5ccf4935137d86307f771999e1fce5437</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.16" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.16.s390x.rpm</filename>
          <sum type="sha256">b0722724eeeb340aeecfe60a1246a83366039c03f0e41e30452dca0dbb924e81</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.16" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.16.s390x.rpm</filename>
          <sum type="sha256">dd94ee1e13fe4885870e8f23d570781a30d3908d9b2178bbb1344afbf6887760</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.16" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.16.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.16.s390x.rpm</filename>
          <sum type="sha256">fd290157d4a9f6ce3612370edbdb1717511ff5866c547db62928760d699edfc0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3852</id>
    <title>Moderate: java-17-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:59:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3852" id="RHSA-2025:3852" type="rhsa" title="RHSA-2025:3852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3852.html" id="ALSA-2025:3852" type="self" title="ALSA-2025:3852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">1113551df1ffff8ebf2cc953e4d290f0953bb040bff7a735faa1b0ba1edd04e8</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">2efea5ceed0cf7c777db27574087d80c1619f833a6ad0f9cf4a28c55c03b09ea</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">565a33b7010afb9b0b69541827202ef75cf9fa8574f5774944fae0c1fe0e3c68</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">a331c11e564178c793588111417e6b9cc7f5e18857249f64ce40cfa7f1ebdfb6</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">decbc6847b1994c736124914809f2960060bbc84b7cc5fc41a6ab8f57e5d9533</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">e4a5dcfab4ad24b7009be53ea79fc1e76a1448319c367deb44c9fd4a66516c2e</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.15.0.6" release="2.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.15.0.6-2.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.15.0.6-2.el8.s390x.rpm</filename>
          <sum type="sha256">fe91bb25ec717c99acbd6552e41ac959770248ec57043d3f5a0d24f9e96dbf79</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:3855</id>
    <title>Moderate: java-21-openjdk security update</title>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-05-08 18:52:30"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Better TLS connection support (CVE-2025-21587)
  * JDK: Improve compiler transformations (CVE-2025-30691)
  * JDK: Enhance Buffered Image handling (CVE-2025-30698)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:3855" id="RHSA-2025:3855" type="rhsa" title="RHSA-2025:3855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-21587" id="CVE-2025-21587" type="cve" title="CVE-2025-21587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30691" id="CVE-2025-30691" type="cve" title="CVE-2025-30691"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30698" id="CVE-2025-30698" type="cve" title="CVE-2025-30698"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-3855.html" id="ALSA-2025:3855" type="self" title="ALSA-2025:3855"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">0d3c80811b6d996229978b582b9bf5789882033ad956fb2c0da8e4da534c893e</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">19052da118319a37c777dad577a47a1ec73c6afd049518b98e1d11a6a7702853</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">a6c13bf814fed8b72f180bc05c685d9ed52b94486a87a6b1c57f4a0f0b2d8a0c</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">ad9b9e2db4b79950b6440a9b52089601dfa692b9087e77a582e908c2b232b47c</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">f760e48c5c3bb1fb47efc1fb4e8b1df7b4ab9a9cc2b6e0056320ecbd494792c5</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">f862e17931972021a2b2dc7d2de6f7fd7b0d7af40b162ba6237cbe033e7269a7</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.7.0.6" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.7.0.6-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.7.0.6-1.el8.s390x.rpm</filename>
          <sum type="sha256">fcc6e870ad0db577a3394afa65de87a97b623b7af12152f3eec28f688b0b9ee9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4043</id>
    <title>Moderate: bluez security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2025-04-22 12:08:47"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>bluez security update</summary>
    <description>The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.   

Security Fix(es):  

  * BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability (CVE-2023-27349)
  * bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability (CVE-2023-51589)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4043" id="RHSA-2025:4043" type="rhsa" title="RHSA-2025:4043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-27349" id="CVE-2023-27349" type="cve" title="CVE-2023-27349"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-51589" id="CVE-2023-51589" type="cve" title="CVE-2023-51589"/>
      <reference href="https://bugzilla.redhat.com/2278787" id="2278787" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2278965" id="2278965" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4043.html" id="ALSA-2025:4043" type="self" title="ALSA-2025:4043"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bluez-libs-devel" version="5.63" release="5.el8_10.alma.1" epoch="0" arch="s390x" src="bluez-5.63-5.el8_10.alma.1.src.rpm">
          <filename>bluez-libs-devel-5.63-5.el8_10.alma.1.s390x.rpm</filename>
          <sum type="sha256">a9fbba206704adef41acf03dd1fb1e7c00080b8e302ec7d959d8d48c348ea594</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4048</id>
    <title>Moderate: xmlrpc-c security update</title>
    <issued date="2025-04-22 00:00:00"/>
    <updated date="2026-04-09 18:11:25"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>xmlrpc-c security update</summary>
    <description>XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC (remote procedure call) over the Internet. It converts an RPC into an XML document, sends it to a remote server using HTTP, and gets back the response in XML.  

Security Fix(es):  

  * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4048" id="RHSA-2025:4048" type="rhsa" title="RHSA-2025:4048"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-8176" id="CVE-2024-8176" type="cve" title="CVE-2024-8176"/>
      <reference href="https://bugzilla.redhat.com/2310137" id="2310137" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4048.html" id="ALSA-2025:4048" type="self" title="ALSA-2025:4048"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xmlrpc-c-devel" version="1.51.0" release="11.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-11.el8_10.src.rpm">
          <filename>xmlrpc-c-devel-1.51.0-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">277ad26cdf00b4b81055e34614ccc2b246d1644fec8164032b3bab7de11995bc</sum>
        </package>
        <package name="xmlrpc-c-c++" version="1.51.0" release="11.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-11.el8_10.src.rpm">
          <filename>xmlrpc-c-c++-1.51.0-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">356ae8cc04acdbf81570cbc94a2cc2be27b96480da687f613730616fcb20c797</sum>
        </package>
        <package name="xmlrpc-c-client++" version="1.51.0" release="11.el8_10" epoch="0" arch="s390x" src="xmlrpc-c-1.51.0-11.el8_10.src.rpm">
          <filename>xmlrpc-c-client++-1.51.0-11.el8_10.s390x.rpm</filename>
          <sum type="sha256">abe1ba8fe09e0a8cb1a41f72370e5887d7098a9548eceac556e0d3e9cb896cb2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4362</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-04-30 00:00:00"/>
    <updated date="2025-05-05 09:45:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4362" id="RHSA-2025:4362" type="rhsa" title="RHSA-2025:4362"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-27792" id="CVE-2020-27792" type="cve" title="CVE-2020-27792"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-46751" id="CVE-2023-46751" type="cve" title="CVE-2023-46751"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46951" id="CVE-2024-46951" type="cve" title="CVE-2024-46951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46952" id="CVE-2024-46952" type="cve" title="CVE-2024-46952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46953" id="CVE-2024-46953" type="cve" title="CVE-2024-46953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46954" id="CVE-2024-46954" type="cve" title="CVE-2024-46954"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2024-46956" id="CVE-2024-46956" type="cve" title="CVE-2024-46956"/>
      <reference href="https://bugzilla.redhat.com/2247179" id="2247179" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2253365" id="2253365" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325041" id="2325041" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325043" id="2325043" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325044" id="2325044" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325045" id="2325045" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2325047" id="2325047" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4362.html" id="ALSA-2025:4362" type="self" title="ALSA-2025:4362"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libgs-devel" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>libgs-devel-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">0ec02e4a1efe97553272a3051748b31efac4123cdad9fbcb820b8b332e5e7b31</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="16.el8_10" epoch="0" arch="noarch" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-doc-9.27-16.el8_10.noarch.rpm</filename>
          <sum type="sha256">43d139df332c77109b35583f9703c08e52add74085247be9afb4e8288332e8c0</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-tools-printing-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">799a8ab83de6243300e87d2175631878b75ce9e994d97b2d91c4da45a346959c</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">8bfbf8c39a1624ffb09bc216113540a00cfd8d46ab6a540d040c5357dbec0861</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.27" release="16.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-16.el8_10.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">a1b7c128454cb2e8da8ba369e2349999b7b8f98e12b64a881ccf926073dcb95d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:4658</id>
    <title>Moderate: libtiff security update</title>
    <issued date="2025-05-07 00:00:00"/>
    <updated date="2025-05-07 15:11:33"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: Heap-based buffer overflow in tools/pal2rgb.c can lead to denial of service (CVE-2017-17095)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:4658" id="RHSA-2025:4658" type="rhsa" title="RHSA-2025:4658"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2017-17095" id="CVE-2017-17095" type="cve" title="CVE-2017-17095"/>
      <reference href="https://bugzilla.redhat.com/1524284" id="1524284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-4658.html" id="ALSA-2025:4658" type="self" title="ALSA-2025:4658"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="34.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-34.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-34.el8_10.s390x.rpm</filename>
          <sum type="sha256">d7ce693f3bde1cd5c705523bdd6e81cd8536f798a90265b0a49e2de9d0b1d044</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7540</id>
    <title>Moderate: libjpeg-turbo security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-06-10 19:29:03"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libjpeg-turbo security update</summary>
    <description>The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.  

Security Fix(es):  

  * libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7540" id="RHSA-2025:7540" type="rhsa" title="RHSA-2025:7540"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2020-13790" id="CVE-2020-13790" type="cve" title="CVE-2020-13790"/>
      <reference href="https://bugzilla.redhat.com/1847155" id="1847155" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7540.html" id="ALSA-2025:7540" type="self" title="ALSA-2025:7540"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="turbojpeg-devel" version="1.5.3" release="14.el8_10" epoch="0" arch="s390x" src="libjpeg-turbo-1.5.3-14.el8_10.src.rpm">
          <filename>turbojpeg-devel-1.5.3-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">54c65ddac699571d9dc13341a8bc4003f7fac210c1dfa549f91900f43d84f776</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7569</id>
    <title>Important: yelp and yelp-xsl security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:52:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>yelp and yelp-xsl security update</summary>
    <description>Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook.  

Security Fix(es):  

  * yelp: Arbitrary file read (CVE-2025-3155)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7569" id="RHSA-2025:7569" type="rhsa" title="RHSA-2025:7569"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3155" id="CVE-2025-3155" type="cve" title="CVE-2025-3155"/>
      <reference href="https://bugzilla.redhat.com/2357091" id="2357091" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7569.html" id="ALSA-2025:7569" type="self" title="ALSA-2025:7569"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="yelp-devel" version="3.28.1" release="3.el8_10.1" epoch="2" arch="s390x" src="yelp-3.28.1-3.el8_10.1.src.rpm">
          <filename>yelp-devel-3.28.1-3.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">66f6899bb634af6d91256fe89fb1133ba5d1a4242d42ae78c7bc4378b8433be6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7571</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:46:29"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.106 and .NET Runtime 9.0.5.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7571" id="RHSA-2025:7571" type="rhsa" title="RHSA-2025:7571"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7571.html" id="ALSA-2025:7571" type="self" title="ALSA-2025:7571"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a60073d8cfd5bf4be2bfcc557b65fa53601a2f9b195e9f840a334fa8bcb17617</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:7589</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-05-14 00:00:00"/>
    <updated date="2025-05-16 09:41:19"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.116 and .NET Runtime 8.0.16.Security Fix(es):  

  * dotnet: .NET and Visual Studio Spoofing Vulnerability (CVE-2025-26646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:7589" id="RHSA-2025:7589" type="rhsa" title="RHSA-2025:7589"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-26646" id="CVE-2025-26646" type="cve" title="CVE-2025-26646"/>
      <reference href="https://bugzilla.redhat.com/2365317" id="2365317" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-7589.html" id="ALSA-2025:7589" type="self" title="ALSA-2025:7589"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a9c66f1035f3d81b06ef6f1744317eb97f354f8e53deaa35244bd8bf2ad145f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8201</id>
    <title>Important: gstreamer1-plugins-bad-free security update</title>
    <issued date="2025-05-27 00:00:00"/>
    <updated date="2025-05-27 13:26:13"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-3887)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8201" id="RHSA-2025:8201" type="rhsa" title="RHSA-2025:8201"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-3887" id="CVE-2025-3887" type="cve" title="CVE-2025-3887"/>
      <reference href="https://bugzilla.redhat.com/2367919" id="2367919" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8201.html" id="ALSA-2025:8201" type="self" title="ALSA-2025:8201"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="5.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-5.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">efcf12528263ce8810aa100ad3ea5e97f8c5ac1ef096f5fc15698f00a29d2eb7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8292</id>
    <title>Important: mingw-freetype security update</title>
    <issued date="2025-05-29 00:00:00"/>
    <updated date="2025-05-29 21:17:09"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-freetype security update</summary>
    <description>MinGW Windows Freetype library.  

Security Fix(es):  

  * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)
  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)
  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)
  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)
  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)
  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)
  * libsoup: NULL Pointer Dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c (CVE-2025-32909)
  * libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an Unauthorized response with Digest authentication (CVE-2025-32910)
  * libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value (CVE-2025-32911)
  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8292" id="RHSA-2025:8292" type="rhsa" title="RHSA-2025:8292"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27363" id="CVE-2025-27363" type="cve" title="CVE-2025-27363"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32050" id="CVE-2025-32050" type="cve" title="CVE-2025-32050"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32052" id="CVE-2025-32052" type="cve" title="CVE-2025-32052"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32053" id="CVE-2025-32053" type="cve" title="CVE-2025-32053"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32906" id="CVE-2025-32906" type="cve" title="CVE-2025-32906"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32907" id="CVE-2025-32907" type="cve" title="CVE-2025-32907"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32909" id="CVE-2025-32909" type="cve" title="CVE-2025-32909"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32910" id="CVE-2025-32910" type="cve" title="CVE-2025-32910"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32911" id="CVE-2025-32911" type="cve" title="CVE-2025-32911"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32913" id="CVE-2025-32913" type="cve" title="CVE-2025-32913"/>
      <reference href="https://bugzilla.redhat.com/2351357" id="2351357" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357067" id="2357067" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357069" id="2357069" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2357070" id="2357070" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359341" id="2359341" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359342" id="2359342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359353" id="2359353" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359354" id="2359354" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359355" id="2359355" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2359357" id="2359357" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8292.html" id="ALSA-2025:8292" type="self" title="ALSA-2025:8292"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw64-freetype-static" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw64-freetype-static-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">0957d400fcdc58bd0f238741050524a3edbfc6c78ab32517041fd241ec27863d</sum>
        </package>
        <package name="mingw64-freetype" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw64-freetype-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">3143c194abf5de4874dd12d4e8dbee75a69ac9eba080432066ceecb913ede3a8</sum>
        </package>
        <package name="mingw32-freetype" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw32-freetype-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">396f2664f2a53de20939acb4a803c90bbbf0df5f5294034a6d3b3f32532de8ed</sum>
        </package>
        <package name="mingw32-freetype-static" version="2.8" release="3.el8_10.1" epoch="0" arch="noarch" src="mingw-freetype-2.8-3.el8_10.1.src.rpm">
          <filename>mingw32-freetype-static-2.8-3.el8_10.1.noarch.rpm</filename>
          <sum type="sha256">dcf87ef91d019b7c813fbf38b2596772d8f3ce3ac781e31bc047951e827601f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8421</id>
    <title>Moderate: ghostscript security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-07-02 11:45:46"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>ghostscript security update</summary>
    <description>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  

Security Fix(es):  

  * Ghostscript: NPDL device: Compression buffer overflow (CVE-2025-27832)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8421" id="RHSA-2025:8421" type="rhsa" title="RHSA-2025:8421"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-27832" id="CVE-2025-27832" type="cve" title="CVE-2025-27832"/>
      <reference href="https://bugzilla.redhat.com/2354949" id="2354949" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8421.html" id="ALSA-2025:8421" type="self" title="ALSA-2025:8421"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libgs-devel" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>libgs-devel-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">20f07fecb67cee0bba2c20b935ba30acec98df5df7482c7355944eb1dad459f9</sum>
        </package>
        <package name="ghostscript-tools-printing" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-tools-printing-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">2ed05ced9110ec1fbcd6e97f0270abd5cea59a877bade111e4e2145187cdce6a</sum>
        </package>
        <package name="ghostscript-doc" version="9.27" release="17.el8_10" epoch="0" arch="noarch" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-doc-9.27-17.el8_10.noarch.rpm</filename>
          <sum type="sha256">510111263297057090e406f085f8dfddc460705ac61e53dff37182a7a8eb082c</sum>
        </package>
        <package name="ghostscript-tools-dvipdf" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-tools-dvipdf-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">9adef6af64a218d7c2dde2af0e16543771e6283b5629f6d8a4c244f9356426a3</sum>
        </package>
        <package name="ghostscript-tools-fonts" version="9.27" release="17.el8_10" epoch="0" arch="s390x" src="ghostscript-9.27-17.el8_10.src.rpm">
          <filename>ghostscript-tools-fonts-9.27-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">c19ca609cf539559ae526a83e5492260416f25c899127cf49052e2ce16503b0e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8427</id>
    <title>Moderate: pandoc security update</title>
    <issued date="2025-06-03 00:00:00"/>
    <updated date="2025-07-02 11:42:55"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>pandoc security update</summary>
    <description>Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. It can read several dialects of Markdown and (subsets of) HTML, reStructuredText, LaTeX, DocBook, JATS, MediaWiki markup, TWiki markup, TikiWiki markup, Creole 1.0, Haddock markup, OPML, Emacs Org-Mode, Emacs Muse, txt2tags, Vimwiki, Word Docx, ODT, and Textile, and it can write Markdown, reStructuredText, XHTML, HTML 5, LaTeX, ConTeXt, DocBook, JATS, OPML, TEI, OpenDocument, ODT, Word docx, RTF, MediaWiki, DokuWiki, ZimWiki, Textile, groff man, groff ms, plain text, Emacs Org-Mode, AsciiDoc, Haddock markup, EPUB (v2 and v3), FictionBook2, InDesign ICML, Muse, LaTeX beamer slides, PowerPoint, and several kinds of HTML/JavaScript slide shows (S5, Slidy, Slideous, DZSlides, reveal.js). In contrast to most existing tools for converting Markdown to HTML, pandoc has a modular design: it consists of a set of readers, which parse text in a given format and produce a native representation of the document, and a set of writers, which convert this native representation into a target format. Thus, adding an input or output format requires only adding a reader or writer. For pdf output please also install pandoc-pdf.  

Security Fix(es):  

  * cmark-gfm: Quadratic complexity bugs may lead to a denial of service (CVE-2023-24824)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8427" id="RHSA-2025:8427" type="rhsa" title="RHSA-2025:8427"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2023-24824" id="CVE-2023-24824" type="cve" title="CVE-2023-24824"/>
      <reference href="https://bugzilla.redhat.com/2210172" id="2210172" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8427.html" id="ALSA-2025:8427" type="self" title="ALSA-2025:8427"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="pandoc-common" version="2.0.6" release="7.el8_10" epoch="0" arch="noarch" src="pandoc-2.0.6-7.el8_10.src.rpm">
          <filename>pandoc-common-2.0.6-7.el8_10.noarch.rpm</filename>
          <sum type="sha256">28442aefc88745fe955361b1aad57f3548d2c9ef3d8cf738eca22a80abad55a2</sum>
        </package>
        <package name="pandoc" version="2.0.6" release="7.el8_10" epoch="0" arch="s390x" src="pandoc-2.0.6-7.el8_10.src.rpm">
          <filename>pandoc-2.0.6-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">f8fc98244e5f4b70f072f19e706278705f90049812d135e638e019d15b17a91e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8686</id>
    <title>Moderate: glibc security update</title>
    <issued date="2025-06-09 00:00:00"/>
    <updated date="2025-06-11 11:31:16"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH (CVE-2025-4802)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8686" id="RHSA-2025:8686" type="rhsa" title="RHSA-2025:8686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-4802" id="CVE-2025-4802" type="cve" title="CVE-2025-4802"/>
      <reference href="https://bugzilla.redhat.com/2367468" id="2367468" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8686.html" id="ALSA-2025:8686" type="self" title="ALSA-2025:8686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.22" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.22.s390x.rpm</filename>
          <sum type="sha256">96776ada7e9e66c99dac1255f5413c29f6719abfabb974d5759e515468386b3f</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.22" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.22.s390x.rpm</filename>
          <sum type="sha256">ca51e1bae7029a15841652afc4863b24634e509301462437901121aa05721336</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.22" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.22.s390x.rpm</filename>
          <sum type="sha256">cc424eaf3e565edba17977bd9880b9f1bfbf6fd3038e3fd2f4bf0dfc79c4f3ce</sum>
        </package>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.22" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.22.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.22.s390x.rpm</filename>
          <sum type="sha256">ed1345e4518f106b4a57eb0f7f1da5e46971fcdd0958ccf84b128ad11bfd4485</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8812</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-12 08:13:38"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.117 and .NET Runtime 8.0.17.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8812" id="RHSA-2025:8812" type="rhsa" title="RHSA-2025:8812"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8812.html" id="ALSA-2025:8812" type="self" title="ALSA-2025:8812"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">ede34509cc18c9abd50d33d45a272b4416b9178a8cef7b3b6a99ac50d8a1b804</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:8815</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-07-02 11:32:04"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.107 and .NET Runtime 9.0.6.Security Fix(es):  

  * dotnet: .NET Remote Code Vulnerability (CVE-2025-30399)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:8815" id="RHSA-2025:8815" type="rhsa" title="RHSA-2025:8815"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-30399" id="CVE-2025-30399" type="cve" title="CVE-2025-30399"/>
      <reference href="https://bugzilla.redhat.com/2369701" id="2369701" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-8815.html" id="ALSA-2025:8815" type="self" title="ALSA-2025:8815"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.107" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.107-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.107-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">7237c833937d1db92d68863de21eb805f782b2d3d5eadf56083170a5fe892729</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9119</id>
    <title>Important: libvpx security update</title>
    <issued date="2025-06-16 00:00:00"/>
    <updated date="2025-07-02 07:38:15"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Double-free in libvpx encoder (CVE-2025-5283)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9119" id="RHSA-2025:9119" type="rhsa" title="RHSA-2025:9119"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-5283" id="CVE-2025-5283" type="cve" title="CVE-2025-5283"/>
      <reference href="https://bugzilla.redhat.com/2368749" id="2368749" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9119.html" id="ALSA-2025:9119" type="self" title="ALSA-2025:9119"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libvpx-devel" version="1.7.0" release="12.el8_10" epoch="0" arch="s390x" src="libvpx-1.7.0-12.el8_10.src.rpm">
          <filename>libvpx-devel-1.7.0-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">c6b1b5a99dec79d10bb900267889d296859b5ef8c1d010b4766477cb9085d533</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9305</id>
    <title>Important: xorg-x11-server and xorg-x11-server-Xwayland security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:21:56"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server and xorg-x11-server-Xwayland security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Out-of-Bounds Read in X Rendering Extension Animated Cursors (CVE-2025-49175)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in Big Requests Extension (CVE-2025-49176)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Unprocessed Client Request Due to Bytes to Ignore (CVE-2025-49178)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer overflow in X Record extension (CVE-2025-49179)
  * xorg-x11-server-Xwayland: xorg-x11-server: tigervnc: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension (CVE-2025-49180)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9305" id="RHSA-2025:9305" type="rhsa" title="RHSA-2025:9305"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49175" id="CVE-2025-49175" type="cve" title="CVE-2025-49175"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49176" id="CVE-2025-49176" type="cve" title="CVE-2025-49176"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49178" id="CVE-2025-49178" type="cve" title="CVE-2025-49178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49179" id="CVE-2025-49179" type="cve" title="CVE-2025-49179"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-49180" id="CVE-2025-49180" type="cve" title="CVE-2025-49180"/>
      <reference href="https://bugzilla.redhat.com/2369947" id="2369947" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369954" id="2369954" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369977" id="2369977" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369978" id="2369978" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2369981" id="2369981" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9305.html" id="ALSA-2025:9305" type="self" title="ALSA-2025:9305"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="26.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-26.el8_10.noarch.rpm</filename>
          <sum type="sha256">5e4a965b0532e061163cabf09726314be06ce6eee8f44cb31b4bba177cb2ce20</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="26.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-26.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-26.el8_10.s390x.rpm</filename>
          <sum type="sha256">ecd8c3ab12a006c71027607d04c53f2a5a29f86b625d26f5069f3c908a60b331</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9318</id>
    <title>Important: javapackages-tools:201801 security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-07-03 08:32:01"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>javapackages-tools:201801 security update</summary>
    <description>The javapackages-tools packages provide macros and scripts to support Java packaging.  

Security Fix(es):  

  * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086)
  * commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default (CVE-2025-48734)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9318" id="RHSA-2025:9318" type="rhsa" title="RHSA-2025:9318"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2019-10086" id="CVE-2019-10086" type="cve" title="CVE-2019-10086"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-48734" id="CVE-2025-48734" type="cve" title="CVE-2025-48734"/>
      <reference href="https://bugzilla.redhat.com/1767483" id="1767483" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2368956" id="2368956" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9318.html" id="ALSA-2025:9318" type="self" title="ALSA-2025:9318"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="javapackages-tools" stream="201801" version="8100020250623120251" context="9edba152" arch="s390x"/>
        <package name="apache-commons-beanutils-javadoc" version="1.9.3" release="5.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="apache-commons-beanutils-1.9.3-5.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>apache-commons-beanutils-javadoc-1.9.3-5.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">071643d508bcd90e72e5c3a69b775d0ec71b3749854af95de045dbcfe84fb954</sum>
        </package>
        <package name="sisu-plexus" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-plexus-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">3bdc5b844b321b8b0ea52eea40909491b3cb4b493ebe2444f94037db2e6f78f9</sum>
        </package>
        <package name="httpcomponents-core-javadoc" version="4.4.10" release="4.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="httpcomponents-core-4.4.10-4.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>httpcomponents-core-javadoc-4.4.10-4.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">6475f53ff2e0165157e4246f0406d6ba3cf44bc991961e577885f1c6ee5f1d8a</sum>
        </package>
        <package name="apache-commons-beanutils" version="1.9.3" release="5.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="apache-commons-beanutils-1.9.3-5.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>apache-commons-beanutils-1.9.3-5.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">975b6f7d2373d03ccfe9585f0c7432aa3dd6eb60d7a1570cce8c4793f297b572</sum>
        </package>
        <package name="sisu-javadoc" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-javadoc-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">adadcae9dfecba9544728fa1b3c74dac20f042ffc0ea4432bc2deac352162d25</sum>
        </package>
        <package name="byaccj" version="1.15" release="17.module_el8.6.0+3182+f8468cf8" epoch="0" arch="s390x" src="byaccj-1.15-17.module_el8.6.0+3182+f8468cf8.src.rpm">
          <filename>byaccj-1.15-17.module_el8.6.0+3182+f8468cf8.s390x.rpm</filename>
          <sum type="sha256">c5b51802d606847b80a0fd03118ae9c18e1bc5175c50b2ffa630fc4df0e46759</sum>
        </package>
        <package name="antlr-C++" version="2.7.7" release="56.module_el8.6.0+3182+f8468cf8" epoch="0" arch="s390x" src="antlr-2.7.7-56.module_el8.6.0+3182+f8468cf8.src.rpm">
          <filename>antlr-C++-2.7.7-56.module_el8.6.0+3182+f8468cf8.s390x.rpm</filename>
          <sum type="sha256">cae35d66967f6e53bef77f8621e4e5210f9b16d1d0c7b02145732d02b3eccea0</sum>
        </package>
        <package name="httpcomponents-core" version="4.4.10" release="4.module_el8.10.0+4020+7deec6e4" epoch="0" arch="noarch" src="httpcomponents-core-4.4.10-4.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>httpcomponents-core-4.4.10-4.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">d874705b5583a67058cf549b260835c9430789a592acffbacc533c6399182d1b</sum>
        </package>
        <package name="sisu-inject" version="0.3.3" release="7.module_el8.10.0+4020+7deec6e4" epoch="1" arch="noarch" src="sisu-0.3.3-7.module_el8.10.0+4020+7deec6e4.src.rpm">
          <filename>sisu-inject-0.3.3-7.module_el8.10.0+4020+7deec6e4.noarch.rpm</filename>
          <sum type="sha256">ef29ebced6604b95ad3dbf8fd5b64bbd5e0320ac9aa9e7dfcef02756c7c331d1</sum>
        </package>
        <package name="jansi-native" version="1.7" release="7.module_el8.6.0+3182+f8468cf8" epoch="0" arch="s390x" src="jansi-native-1.7-7.module_el8.6.0+3182+f8468cf8.src.rpm">
          <filename>jansi-native-1.7-7.module_el8.6.0+3182+f8468cf8.s390x.rpm</filename>
          <sum type="sha256">fb99ef84bf3c42c306654b249c88670f11d6da8f8f067a302caf1bd888733932</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9329</id>
    <title>Important: perl-YAML-LibYAML security update</title>
    <issued date="2025-06-23 00:00:00"/>
    <updated date="2025-06-30 13:18:36"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-YAML-LibYAML security update</summary>
    <description>Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby.  

Security Fix(es):  

  * yaml-libyaml: LibYAML Perl File Modification Vulnerability (CVE-2025-40908)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9329" id="RHSA-2025:9329" type="rhsa" title="RHSA-2025:9329"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-40908" id="CVE-2025-40908" type="cve" title="CVE-2025-40908"/>
      <reference href="https://bugzilla.redhat.com/2369630" id="2369630" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9329.html" id="ALSA-2025:9329" type="self" title="ALSA-2025:9329"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="perl-YAML-LibYAML" version="0.70" release="2.el8_10" epoch="1" arch="s390x" src="perl-YAML-LibYAML-0.70-2.el8_10.src.rpm">
          <filename>perl-YAML-LibYAML-0.70-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">873eb8ace12edac53d77749d1fa5456d2515cd4603ca67b87aa9faade17758db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9605</id>
    <title>Important: perl-File-Find-Rule security update</title>
    <issued date="2025-06-25 00:00:00"/>
    <updated date="2025-06-26 18:41:23"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-File-Find-Rule security update</summary>
    <description>File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.  

Security Fix(es):  

  * perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9605" id="RHSA-2025:9605" type="rhsa" title="RHSA-2025:9605"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2011-10007" id="CVE-2011-10007" type="cve" title="CVE-2011-10007"/>
      <reference href="https://bugzilla.redhat.com/2370424" id="2370424" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9605.html" id="ALSA-2025:9605" type="self" title="ALSA-2025:9605"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="perl-File-Find-Rule" version="0.34" release="9.el8_10" epoch="0" arch="noarch" src="perl-File-Find-Rule-0.34-9.el8_10.src.rpm">
          <filename>perl-File-Find-Rule-0.34-9.el8_10.noarch.rpm</filename>
          <sum type="sha256">9817797881652586f30a8462920e76a183db2131c3ff88756c2fa7142535864e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:9878</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-30 00:00:00"/>
    <updated date="2025-07-01 22:08:40"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>The libblockdev packages provide a C library with GObject introspection support used for low-level operations on block devices. The library serves as a thin wrapper around plug-ins for specific functionality, such as LVM, Btrfs, LUKS, or MD RAID.  

Security Fix(es):  

  * libblockdev: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2025:9878" id="RHSA-2025:9878" type="rhsa" title="RHSA-2025:9878"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-9878.html" id="ALSA-2025:9878" type="self" title="ALSA-2025:9878"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libblockdev-part-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-part-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">1ce25e93009660316306a33e711df22e5abc1f6e5a754441f8cf7313c2c82f65</sum>
        </package>
        <package name="libblockdev-utils-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-utils-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">2cbd1952a8dc866c3f6ca44605f03408987edbbd75755ddf5fd6ad95238d210a</sum>
        </package>
        <package name="libblockdev-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">38952e448755b343ff093d54fb76e10cb4c350ecbd2abd41842a26cc7d3534bc</sum>
        </package>
        <package name="libblockdev-swap-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-swap-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">75f5480a8611130fb8b34363650502a6632ef35cb3249477b723707cbe9ca918</sum>
        </package>
        <package name="libblockdev-lvm-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-lvm-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">8256a04f513953e257e30ba171ac2c57ad0f023cce845b9a0cce37a302e74f61</sum>
        </package>
        <package name="libblockdev-vdo-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-vdo-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">952cefe040ccb8f336c0161f249164e12e760aa5871ba9e55276d954acb2a9c4</sum>
        </package>
        <package name="libblockdev-crypto-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-crypto-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">ce4b8aee92f86ddd176a94553b0e8332b859aaa6610c83ef8c1103232a6541d3</sum>
        </package>
        <package name="libblockdev-loop-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-loop-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d846cceab3fba0fd93294446413190713577b3808eb9e49e5a1bfb6ef6abf1ea</sum>
        </package>
        <package name="libblockdev-mdraid-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-mdraid-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d8662bbe3fe89c57f66c06a78670340113965238bfef9a616f869a7d76cd179c</sum>
        </package>
        <package name="libblockdev-fs-devel" version="2.28" release="7.el8_10" epoch="0" arch="s390x" src="libblockdev-2.28-7.el8_10.src.rpm">
          <filename>libblockdev-fs-devel-2.28-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d92b7f2162f2b90d5f6b4aaa8ccfabe0cf2ebd27e40700b54846c74cc1524196</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2025:A004</id>
    <title>Important: libblockdev security update</title>
    <issued date="2025-06-20 00:00:00"/>
    <updated date="2025-06-20 14:58:20"/>
    <rights>Copyright 2025 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libblockdev security update</summary>
    <description>libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

Security Fix(es):

* libblockdev: Due to the way libblockdev interacts with the udisks daemon, an "allow_active" user on a system may be able escalate to full root privileges on the target host. (CVE-2025-6019)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6019" id="CVE-2025-6019" type="cve" title="CVE-2025-6019"/>
      <reference href="https://bugzilla.redhat.com/2370051" id="2370051" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2025-A004.html" id="ALSA-2025:A004" type="self" title="ALSA-2025:A004"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libblockdev-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">1a851a4ea84058cfe86d74b4db4fc9ca6374aacb9099c61fa0f4c738cc443daf</sum>
        </package>
        <package name="libblockdev-mdraid-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-mdraid-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">41a3923b2444a1a559c179c0dffa03b5604368d4d73bdd3df98e3478164747c5</sum>
        </package>
        <package name="libblockdev-swap-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-swap-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">49ab9b101444342779eb02cf4459967eced8c61d5d06a9aab7fb0fd474839063</sum>
        </package>
        <package name="libblockdev-lvm-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-lvm-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">70de0e7fab2b301a29da8ae3d88ffedb564cbdd210fae3d3467104005a4ab93a</sum>
        </package>
        <package name="libblockdev-fs-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-fs-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">77143dc0b6821598c2206ef707f1142ad81e4024a15bad4d87141e4fda4c5a05</sum>
        </package>
        <package name="libblockdev-loop-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-loop-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">7de82f5f91d2c744a4c515ba7df98ca3aac1710dc19134c9e3c7cd44b10b59a2</sum>
        </package>
        <package name="libblockdev-crypto-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-crypto-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">964d7ee2ae7f97c90c73c69b33ea2e2c2db2522da18b8d882e7b48b2a754c487</sum>
        </package>
        <package name="libblockdev-part-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-part-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">9b454a63cb133352d2f89fba43047ae3dee6cce1ec68dd5fa7376b5744dbca89</sum>
        </package>
        <package name="libblockdev-utils-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-utils-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">aa4a76dc07451bb962cc7383fbe0a5e9966380794eb2a5b9b09997bf64b75f05</sum>
        </package>
        <package name="libblockdev-vdo-devel" version="2.28" release="6.el8.alma.1" epoch="0" arch="s390x" src="libblockdev-2.28-6.el8.alma.1.src.rpm">
          <filename>libblockdev-vdo-devel-2.28-6.el8.alma.1.s390x.rpm</filename>
          <sum type="sha256">f84eaed48fa0d12151693ef3b6aaaa7d07908320ef71817cfae24571ff551bc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0123</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:18:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked (CVE-2025-8291)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0123" id="RHSA-2026:0123" type="rhsa" title="RHSA-2026:0123"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-8291" id="CVE-2025-8291" type="cve" title="CVE-2025-8291"/>
      <reference href="https://bugzilla.redhat.com/2402342" id="2402342" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0123.html" id="ALSA-2026:0123" type="self" title="ALSA-2026:0123"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-debug" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6a200352f8a0080954e0d3fc9bc5bb092c8644f841fc8c63f616969835e9cb5b</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a1809338498cbf58f0d835099110df353a7ecdc2ba7c752c91599ff3645942ba</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="1.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-1.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">fc86c602b56058ee8d556f5983cb5c7eea5311dc0a5ed97dedb6e89930447e51</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0130</id>
    <title>Moderate: poppler security update</title>
    <issued date="2026-01-06 00:00:00"/>
    <updated date="2026-01-07 14:26:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0130" id="RHSA-2026:0130" type="rhsa" title="RHSA-2026:0130"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-32365" id="CVE-2025-32365" type="cve" title="CVE-2025-32365"/>
      <reference href="https://bugzilla.redhat.com/2357656" id="2357656" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0130.html" id="ALSA-2026:0130" type="self" title="ALSA-2026:0130"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="poppler-cpp-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">081379ebd51c816e113a867fe079de2b77942607902e685aed13c52736d67b34</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-cpp-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">2530ee08b7fcb467c42ee876be4253e047ef98cae187b8b72f5d8e690d16bc68</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-devel-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b329e2d49c390a27b618053add68759e9889f53eff58d3a07810d8b2a6cb9a7</sum>
        </package>
        <package name="poppler-qt5-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">a9bc9962c21628fe54b1c9b6b51fa2008665f43bdd1a4de64c02e49f2f47f9e7</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="13.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-glib-devel-20.11.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">f02166e57ac96c91952b5d06b4b0dbcbfb92baacea14bcf02ef7a0b16872f2d5</sum>
        </package>
        <package name="poppler-glib-doc" version="20.11.0" release="13.el8_10" epoch="0" arch="noarch" src="poppler-20.11.0-13.el8_10.src.rpm">
          <filename>poppler-glib-doc-20.11.0-13.el8_10.noarch.rpm</filename>
          <sum type="sha256">f76a00715b7f950cba0c9ae04abaa8d0ad04f55dcf3ff25632c1000fffca95d4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0756</id>
    <title>Moderate: transfig security update</title>
    <issued date="2026-01-19 00:00:00"/>
    <updated date="2026-01-19 10:24:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>transfig security update</summary>
    <description>The transfig utility creates a makefile which translates FIG (created by xfig) or PIC figures into a specified LaTeX graphics language (for example, PostScript(TM)). Transfig is used to create TeX documents which are portable (i.e., they can be printed in a wide variety of environments). Install transfig if you need a utility for translating FIG or PIC figures into certain graphics languages.  

Security Fix(es):  

  * xfig: xfig: Stack-overflow allows possible code execution via local input manipulation (CVE-2025-46397)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0756" id="RHSA-2026:0756" type="rhsa" title="RHSA-2026:0756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-46397" id="CVE-2025-46397" type="cve" title="CVE-2025-46397"/>
      <reference href="https://bugzilla.redhat.com/2362058" id="2362058" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0756.html" id="ALSA-2026:0756" type="self" title="ALSA-2026:0756"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="transfig" version="3.2.6a" release="5.el8_10" epoch="1" arch="s390x" src="transfig-3.2.6a-5.el8_10.src.rpm">
          <filename>transfig-3.2.6a-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">02d93edc3bbd9855f74c3a5522f8e959a78e912af11bce425b0f70d644d764e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0927</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:52:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142862, AlmaLinux-142881, AlmaLinux-142882, AlmaLinux-142883, AlmaLinux-142884, AlmaLinux-142885, AlmaLinux-142886, AlmaLinux-142887, AlmaLinux-142888)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0927" id="RHSA-2026:0927" type="rhsa" title="RHSA-2026:0927"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0927.html" id="ALSA-2026:0927" type="self" title="ALSA-2026:0927"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">764037fc62154c7c9d21917cfe4638e82404f8c8a0d0415a780476d2d9277e50</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">a683b042b6c52b29b8a8f551d102a9d372aaf473d57c811e295f1cced27ce209</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">b8dfff1e777e4c6e057fac77d7fad80867aef236f829bb8cdc061e1b00cb57e3</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">bf649f6e86669900f4e0c942a2c1db895e2c47cbb2bac694d71c1ddc350cf449</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">e9ec779b97f82cc2e68bb5453495022c179d5b1ef05a66f7f571923c0de65670</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">ea3a51d4df635dbe1a4e4ff596ed937d15d4556a356e4dec1758f2ceb8c5c9d4</sum>
        </package>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.18.0.8" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.18.0.8-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.18.0.8-1.el8.s390x.rpm</filename>
          <sum type="sha256">f4c0e46a8d39d868122c535391ce5cb49f70e73a0e5fc51fddea11763f46820a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0928</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-26 11:04:53"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Improve JMX connections (CVE-2026-21925)
  * JDK: Improve HttpServer Request handling (CVE-2026-21933)
  * JDK: Enhance Certificate Checking (CVE-2026-21945)
  * libpng: LIBPNG buffer overflow (CVE-2025-64720)
  * libpng: LIBPNG heap buffer overflow (CVE-2025-65018)


Bug Fix(es):  

  * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (AlmaLinux-142860, AlmaLinux-142876, AlmaLinux-142877, AlmaLinux-142878, AlmaLinux-142879, AlmaLinux-142880)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0928" id="RHSA-2026:0928" type="rhsa" title="RHSA-2026:0928"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-64720" id="CVE-2025-64720" type="cve" title="CVE-2025-64720"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-65018" id="CVE-2025-65018" type="cve" title="CVE-2025-65018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21925" id="CVE-2026-21925" type="cve" title="CVE-2026-21925"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21933" id="CVE-2026-21933" type="cve" title="CVE-2026-21933"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-21945" id="CVE-2026-21945" type="cve" title="CVE-2026-21945"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0928.html" id="ALSA-2026:0928" type="self" title="ALSA-2026:0928"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">099a1542b90f0b4fefe134adea0e716770e73de4b687bd9094729233618969bf</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">26079971158b4b6098f206d12bf76865d00c7f6e66752702d80449ce79418bbf</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">299a31d13b1525c3ac8ce03e486fe6bbe8c18aeaa9db97274ceedf1d18b29898</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">3d043226a973a127ed4ade91b99e0436452761f863738b78862d8fb2beb132ed</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">764401cdc2deb089d585313ed2e42d7d738f64631caf6e8cc1de3187c4813fc3</sum>
        </package>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">98b8e0ebc944fe8f57ca8dde7a5b5c1b6d4d43025cab65fc815c36b8b1dff0fe</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.10.0.7" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.10.0.7-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.10.0.7-1.el8.s390x.rpm</filename>
          <sum type="sha256">e58b2c2f590d700a651e61f2526e9f25a24f66823f2c633bf237e33a5b79c3dc</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:0991</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-01-22 00:00:00"/>
    <updated date="2026-01-24 01:40:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:0991" id="RHSA-2026:0991" type="rhsa" title="RHSA-2026:0991"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13601" id="CVE-2025-13601" type="cve" title="CVE-2025-13601"/>
      <reference href="https://bugzilla.redhat.com/2416741" id="2416741" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-0991.html" id="ALSA-2026:0991" type="self" title="ALSA-2026:0991"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glib2-doc" version="2.56.4" release="168.el8_10" epoch="0" arch="noarch" src="glib2-2.56.4-168.el8_10.src.rpm">
          <filename>glib2-doc-2.56.4-168.el8_10.noarch.rpm</filename>
          <sum type="sha256">d84003e17d8a0a3b0d6a34e0fa7729433f275b7aad762ad65efc606d27f169b1</sum>
        </package>
        <package name="glib2-static" version="2.56.4" release="168.el8_10" epoch="0" arch="s390x" src="glib2-2.56.4-168.el8_10.src.rpm">
          <filename>glib2-static-2.56.4-168.el8_10.s390x.rpm</filename>
          <sum type="sha256">eecdfd6576a35eab300fc56bbf57d7abe13be23e63beac4f244e1a3580ec265d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10741</id>
    <title>Important: gdk-pixbuf2 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:29:05"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gdk-pixbuf2 security update</summary>
    <description>The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.  

Security Fix(es):  

  * gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10741" id="RHSA-2026:10741" type="rhsa" title="RHSA-2026:10741"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5201" id="CVE-2026-5201" type="cve" title="CVE-2026-5201"/>
      <reference href="https://bugzilla.redhat.com/2453291" id="2453291" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10741.html" id="ALSA-2026:10741" type="self" title="ALSA-2026:10741"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="gdk-pixbuf2-xlib-devel" version="2.36.12" release="8.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-8.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-devel-2.36.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">3fac72bde2dbf3274045b942c566e8ee57994e50e88872148cc9c93f324a5246</sum>
        </package>
        <package name="gdk-pixbuf2-xlib" version="2.36.12" release="8.el8_10" epoch="0" arch="s390x" src="gdk-pixbuf2-2.36.12-8.el8_10.src.rpm">
          <filename>gdk-pixbuf2-xlib-2.36.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">f229a97e6cb30d778a6fcf201004f5b614b803f8e22d75e68ea2fb4547718f9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:10950</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:40:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)
  * python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)
  * cpython: Out-of-memory when loading Plist (CVE-2025-13837)
  * cpython: Header injection via newlines in data URL mediatype in Python (CVE-2025-15282)
  * cpython: Header injection in http.cookies.Morsel in Python (CVE-2026-0672)
  * cpython: CPython: Logging Bypass in Legacy .pyc File Handling (CVE-2026-2297)
  * cpython: Incomplete control character validation in http.cookies (CVE-2026-3644)
  * cpython: Stack overflow parsing XML with deeply nested DTD content models (CVE-2026-4224)
  * python: Python: HTTP header injection via CR/LF in proxy tunnel headers (CVE-2026-1502)
  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:10950" id="RHSA-2026:10950" type="rhsa" title="RHSA-2026:10950"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13837" id="CVE-2025-13837" type="cve" title="CVE-2025-13837"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15282" id="CVE-2025-15282" type="cve" title="CVE-2025-15282"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-6075" id="CVE-2025-6075" type="cve" title="CVE-2025-6075"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0672" id="CVE-2026-0672" type="cve" title="CVE-2026-0672"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1502" id="CVE-2026-1502" type="cve" title="CVE-2026-1502"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2297" id="CVE-2026-2297" type="cve" title="CVE-2026-2297"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3644" id="CVE-2026-3644" type="cve" title="CVE-2026-3644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4224" id="CVE-2026-4224" type="cve" title="CVE-2026-4224"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2408891" id="2408891" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418084" id="2418084" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431366" id="2431366" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431374" id="2431374" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2444691" id="2444691" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448168" id="2448168" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2448181" id="2448181" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457409" id="2457409" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-10950.html" id="ALSA-2026:10950" type="self" title="ALSA-2026:10950"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-idle" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">aa0f106605bbea0237b1852247e170275f2416f381cd67d63b8903cbf1e95cb2</sum>
        </package>
        <package name="python3.12-test" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">c95a05ee34810a4766527c34b363ea11f7de1c526c629b9a6cfe90b4c2a73a6e</sum>
        </package>
        <package name="python3.12-debug" version="3.12.13" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.13-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.13-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">fb0b6263308a74b5ccf605fe924431ff02a5c3379568ceb401b221aad11aa1db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11062</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-04-27 00:00:00"/>
    <updated date="2026-04-28 13:42:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules (CVE-2026-6100)
  * python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API (CVE-2026-4786)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11062" id="RHSA-2026:11062" type="rhsa" title="RHSA-2026:11062"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4786" id="CVE-2026-4786" type="cve" title="CVE-2026-4786"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-6100" id="CVE-2026-6100" type="cve" title="CVE-2026-6100"/>
      <reference href="https://bugzilla.redhat.com/2457932" id="2457932" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458049" id="2458049" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11062.html" id="ALSA-2026:11062" type="self" title="ALSA-2026:11062"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">0c24945e4ab7c22ca73d75a8aaad9c51de8547f8a47a7befc4f20b57ede32ce7</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">32c5731fef2d63ad1b273a2f94abc44e56153f9bad0bcb29ea9561f9f687cff9</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="7.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-7.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">5f89cc4701bb2e9389a4f7db806e592a83e3c954788675a88593f8be92be5746</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11635</id>
    <title>Important: PackageKit security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-29 12:49:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>PackageKit security update</summary>
    <description>PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distribution, cross-architecture API.  

Security Fix(es):  

  * PackageKit: race condition vulnerability leads to arbitrary package installation as root (CVE-2026-41651)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11635" id="RHSA-2026:11635" type="rhsa" title="RHSA-2026:11635"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-41651" id="CVE-2026-41651" type="cve" title="CVE-2026-41651"/>
      <reference href="https://bugzilla.redhat.com/2460604" id="2460604" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11635.html" id="ALSA-2026:11635" type="self" title="ALSA-2026:11635"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="PackageKit-glib-devel" version="1.1.12" release="8.el8_10" epoch="0" arch="s390x" src="PackageKit-1.1.12-8.el8_10.src.rpm">
          <filename>PackageKit-glib-devel-1.1.12-8.el8_10.s390x.rpm</filename>
          <sum type="sha256">74c8b291b94e768f059b09528572e4e61139eba2aea1b10ca0b1d0708b2dcfc9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:11692</id>
    <title>Important: xorg-x11-server security update</title>
    <issued date="2026-04-29 00:00:00"/>
    <updated date="2026-04-30 07:07:01"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>xorg-x11-server security update</summary>
    <description>X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon.  

Security Fix(es):  

  * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling (CVE-2026-33999)
  * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory corruption (CVE-2026-34001)
  * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory access (CVE-2026-34003)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:11692" id="RHSA-2026:11692" type="rhsa" title="RHSA-2026:11692"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33999" id="CVE-2026-33999" type="cve" title="CVE-2026-33999"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34001" id="CVE-2026-34001" type="cve" title="CVE-2026-34001"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34003" id="CVE-2026-34003" type="cve" title="CVE-2026-34003"/>
      <reference href="https://bugzilla.redhat.com/2451106" id="2451106" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451109" id="2451109" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2451113" id="2451113" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-11692.html" id="ALSA-2026:11692" type="self" title="ALSA-2026:11692"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="xorg-x11-server-source" version="1.20.11" release="28.el8_10" epoch="0" arch="noarch" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-source-1.20.11-28.el8_10.noarch.rpm</filename>
          <sum type="sha256">365a95d1f6d63795eb2e8caba5731a72ed7ea60f73616d61ce93798da5e43e1e</sum>
        </package>
        <package name="xorg-x11-server-devel" version="1.20.11" release="28.el8_10" epoch="0" arch="s390x" src="xorg-x11-server-1.20.11-28.el8_10.src.rpm">
          <filename>xorg-x11-server-devel-1.20.11-28.el8_10.s390x.rpm</filename>
          <sum type="sha256">bd91d4bd52fb0db80db1a8c68e8b36c9d34923317cb5c7283690d03f8b7db253</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13657</id>
    <title>Moderate: corosync security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-06 08:44:49"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>corosync security update</summary>
    <description>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.  

Security Fix(es):  

  * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13657" id="RHSA-2026:13657" type="rhsa" title="RHSA-2026:13657"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35091" id="CVE-2026-35091" type="cve" title="CVE-2026-35091"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-35092" id="CVE-2026-35092" type="cve" title="CVE-2026-35092"/>
      <reference href="https://bugzilla.redhat.com/2453813" id="2453813" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453814" id="2453814" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13657.html" id="ALSA-2026:13657" type="self" title="ALSA-2026:13657"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="corosync-vqsim" version="3.1.8" release="1.el8_10.1" epoch="0" arch="s390x" src="corosync-3.1.8-1.el8_10.1.src.rpm">
          <filename>corosync-vqsim-3.1.8-1.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">66ac9912876d2bcda2f36284bf9767ed9213eaf2adfdc434fd2600eae7db8b2e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1374</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-29 12:10:35"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)
  * cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1374" id="RHSA-2026:1374" type="rhsa" title="RHSA-2026:1374"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12084" id="CVE-2025-12084" type="cve" title="CVE-2025-12084"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2418655" id="2418655" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1374.html" id="ALSA-2026:1374" type="self" title="ALSA-2026:1374"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">65ac8eeeb6196306d1cd3928c4a9163f1683822a6bb10c4a2f4107b4935743f2</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">6adda8ce767e93ce351b23cf2e046692a847883a1ca31ad8d13f0a13857fe8dc</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="4.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-4.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">88fc46168fc68eedbc1f7ff34a3d0dd099cf29c37a4f919bf634e9380167d3e3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:13830</id>
    <title>Important: dovecot security update</title>
    <issued date="2026-05-05 00:00:00"/>
    <updated date="2026-05-05 19:20:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>dovecot security update</summary>
    <description>Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages.   

Security Fix(es):  

  * dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (CVE-2025-59032)
  * dovecot: denial of service via crafted message before authentication (CVE-2026-27858)
  * dovecot: denial of service via specially crafted NOOP command (CVE-2026-27857)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:13830" id="RHSA-2026:13830" type="rhsa" title="RHSA-2026:13830"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59032" id="CVE-2025-59032" type="cve" title="CVE-2025-59032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27857" id="CVE-2026-27857" type="cve" title="CVE-2026-27857"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27858" id="CVE-2026-27858" type="cve" title="CVE-2026-27858"/>
      <reference href="https://bugzilla.redhat.com/2452172" id="2452172" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452175" id="2452175" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452179" id="2452179" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-13830.html" id="ALSA-2026:13830" type="self" title="ALSA-2026:13830"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dovecot-devel" version="2.3.16" release="7.el8_10" epoch="1" arch="s390x" src="dovecot-2.3.16-7.el8_10.src.rpm">
          <filename>dovecot-devel-2.3.16-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">17804a658ecf1de5fc79b30e23c383f551c6e50a4d41ccfed107ebc418219d7b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:14929</id>
    <title>Important: mingw-libtiff security update</title>
    <issued date="2026-05-07 00:00:00"/>
    <updated date="2026-05-07 23:01:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-libtiff security update</summary>
    <description>The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if you need to manipulate TIFF format image files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:14929" id="RHSA-2026:14929" type="rhsa" title="RHSA-2026:14929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-14929.html" id="ALSA-2026:14929" type="self" title="ALSA-2026:14929"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw32-libtiff-static" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw32-libtiff-static-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">4a902d487e164530bfe72acbe7678852c86f9bba5aa4f7ddd5ae778e740e1b84</sum>
        </package>
        <package name="mingw32-libtiff" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw32-libtiff-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">4b0ea04e011300345ac7cdeeb190713afbd2d0bfd97452c3cf5cb7c3b662e0d3</sum>
        </package>
        <package name="mingw64-libtiff" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw64-libtiff-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">8cb0e33b9d810181244d20c7ad02eb444407393a2c6009be85aa5ad3e6f29f47</sum>
        </package>
        <package name="mingw64-libtiff-static" version="4.0.9" release="4.el8_10" epoch="0" arch="noarch" src="mingw-libtiff-4.0.9-4.el8_10.src.rpm">
          <filename>mingw64-libtiff-static-4.0.9-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">c9cf3e35258054c54762a0eeabd8204d3c24052c90f76b9fa15c4743305af717</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:15953</id>
    <title>Moderate: glib2 security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glib2 security update</summary>
    <description>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.  

Security Fix(es):  

  * glib: GLib: Buffer underflow in GVariant parser leads to heap corruption (CVE-2025-14087)
  * glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (CVE-2025-14512)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:15953" id="RHSA-2026:15953" type="rhsa" title="RHSA-2026:15953"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14087" id="CVE-2025-14087" type="cve" title="CVE-2025-14087"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14512" id="CVE-2025-14512" type="cve" title="CVE-2025-14512"/>
      <reference href="https://bugzilla.redhat.com/2419093" id="2419093" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2421339" id="2421339" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-15953.html" id="ALSA-2026:15953" type="self" title="ALSA-2026:15953"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glib2-doc" version="2.56.4" release="169.el8_10" epoch="0" arch="noarch" src="glib2-2.56.4-169.el8_10.src.rpm">
          <filename>glib2-doc-2.56.4-169.el8_10.noarch.rpm</filename>
          <sum type="sha256">19bd47518da3f2ecfcdc8491149a58d42ac78a6ec4fa9782151929fbbf8d5743</sum>
        </package>
        <package name="glib2-static" version="2.56.4" release="169.el8_10" epoch="0" arch="s390x" src="glib2-2.56.4-169.el8_10.src.rpm">
          <filename>glib2-static-2.56.4-169.el8_10.s390x.rpm</filename>
          <sum type="sha256">92ec2a3dc6dfec7dce3efaaf8867d49d536658a52e2a61bb792e081d37d4f3e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16019</id>
    <title>Moderate: freerdp security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-11 18:08:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
  * freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
  * freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)
  * freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
  * freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
  * freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
  * freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
  * FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16019" id="RHSA-2026:16019" type="rhsa" title="RHSA-2026:16019"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25952" id="CVE-2026-25952" type="cve" title="CVE-2026-25952"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26986" id="CVE-2026-26986" type="cve" title="CVE-2026-26986"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27951" id="CVE-2026-27951" type="cve" title="CVE-2026-27951"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-29775" id="CVE-2026-29775" type="cve" title="CVE-2026-29775"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31883" id="CVE-2026-31883" type="cve" title="CVE-2026-31883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31884" id="CVE-2026-31884" type="cve" title="CVE-2026-31884"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31885" id="CVE-2026-31885" type="cve" title="CVE-2026-31885"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33985" id="CVE-2026-33985" type="cve" title="CVE-2026-33985"/>
      <reference href="https://bugzilla.redhat.com/2442768" id="2442768" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442782" id="2442782" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2442783" id="2442783" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447379" id="2447379" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447383" id="2447383" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447385" id="2447385" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447386" id="2447386" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453217" id="2453217" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16019.html" id="ALSA-2026:16019" type="self" title="ALSA-2026:16019"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="9.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-9.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-9.el8_10.s390x.rpm</filename>
          <sum type="sha256">f11eeae7fc09aaeb662c580f38f7a30ca4f706d78b64e5dfe1aadd8ae83c55c1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16055</id>
    <title>Important: libtiff security update</title>
    <issued date="2026-05-11 00:00:00"/>
    <updated date="2026-05-12 08:34:30"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libtiff security update</summary>
    <description>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.  

Security Fix(es):  

  * libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing (CVE-2026-4775)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16055" id="RHSA-2026:16055" type="rhsa" title="RHSA-2026:16055"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4775" id="CVE-2026-4775" type="cve" title="CVE-2026-4775"/>
      <reference href="https://bugzilla.redhat.com/2450768" id="2450768" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16055.html" id="ALSA-2026:16055" type="self" title="ALSA-2026:16055"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libtiff-tools" version="4.0.9" release="37.el8_10" epoch="0" arch="s390x" src="libtiff-4.0.9-37.el8_10.src.rpm">
          <filename>libtiff-tools-4.0.9-37.el8_10.s390x.rpm</filename>
          <sum type="sha256">4b033f56feb0275fb63d6cd74e26994abcb3e32499b59ca4d8c487b248ed978a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:16252</id>
    <title>Important: jq security update</title>
    <issued date="2026-05-12 00:00:00"/>
    <updated date="2026-05-13 08:31:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>jq security update</summary>
    <description>jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.  

Security Fix(es):  

  * jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
  * jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:16252" id="RHSA-2026:16252" type="rhsa" title="RHSA-2026:16252"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-39979" id="CVE-2026-39979" type="cve" title="CVE-2026-39979"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40164" id="CVE-2026-40164" type="cve" title="CVE-2026-40164"/>
      <reference href="https://bugzilla.redhat.com/2458077" id="2458077" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2458084" id="2458084" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-16252.html" id="ALSA-2026:16252" type="self" title="ALSA-2026:16252"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="jq-devel" version="1.6" release="12.el8_10" epoch="0" arch="s390x" src="jq-1.6-12.el8_10.src.rpm">
          <filename>jq-devel-1.6-12.el8_10.s390x.rpm</filename>
          <sum type="sha256">84eedbe33a612df9c2fa30c1f1ce265e31e30f15a8a12e9f8d79391b4aaa9827</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:1852</id>
    <title>Moderate: util-linux security update</title>
    <issued date="2026-02-03 00:00:00"/>
    <updated date="2026-02-10 08:33:37"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>util-linux security update</summary>
    <description>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.  

Security Fix(es):  

  * util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:1852" id="RHSA-2026:1852" type="rhsa" title="RHSA-2026:1852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-14104" id="CVE-2025-14104" type="cve" title="CVE-2025-14104"/>
      <reference href="https://bugzilla.redhat.com/2419369" id="2419369" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-1852.html" id="ALSA-2026:1852" type="self" title="ALSA-2026:1852"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libmount-devel" version="2.32.1" release="48.el8_10" epoch="0" arch="s390x" src="util-linux-2.32.1-48.el8_10.src.rpm">
          <filename>libmount-devel-2.32.1-48.el8_10.s390x.rpm</filename>
          <sum type="sha256">b5b40840718c95f4c7ba4d974cc9b8916058a592de7a39fe02623409c4d2c401</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:19559</id>
    <title>Important: libsndfile security update</title>
    <issued date="2026-05-20 00:00:00"/>
    <updated date="2026-05-20 12:25:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libsndfile security update</summary>
    <description>libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.   

Security Fix(es):  

  * libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:19559" id="RHSA-2026:19559" type="rhsa" title="RHSA-2026:19559"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-37555" id="CVE-2026-37555" type="cve" title="CVE-2026-37555"/>
      <reference href="https://bugzilla.redhat.com/2463856" id="2463856" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-19559.html" id="ALSA-2026:19559" type="self" title="ALSA-2026:19559"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libsndfile-devel" version="1.0.28" release="17.el8_10" epoch="0" arch="s390x" src="libsndfile-1.0.28-17.el8_10.src.rpm">
          <filename>libsndfile-devel-1.0.28-17.el8_10.s390x.rpm</filename>
          <sum type="sha256">1d8a743b8e068bfa8a3ad5e63d49cd9e8990b0ebd5eab42c3ad0e48736002ae0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20579</id>
    <title>Moderate: freeipmi security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-26 10:06:22"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>freeipmi security update</summary>
    <description>The freeipmi packages contain an Intelligent Platform Management Interface (IPMI) remote console and system management software based on the IPMI specification.  

Security Fix(es):  

  * freeipmi: buffer overflows on response messages via ipmi-oem (CVE-2026-33554)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20579" id="RHSA-2026:20579" type="rhsa" title="RHSA-2026:20579"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33554" id="CVE-2026-33554" type="cve" title="CVE-2026-33554"/>
      <reference href="https://bugzilla.redhat.com/2450778" id="2450778" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20579.html" id="ALSA-2026:20579" type="self" title="ALSA-2026:20579"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freeipmi-devel" version="1.6.17" release="1.el8_10" epoch="0" arch="s390x" src="freeipmi-1.6.17-1.el8_10.src.rpm">
          <filename>freeipmi-devel-1.6.17-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c647b101c92f3991dd4c74923e3b6276f4a6b7a708829a38d5faaae01138f703</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20587</id>
    <title>Moderate: glibc security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:39:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>glibc security update</summary>
    <description>The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.  

Security Fix(es):  

  * glibc: glibc: Denial of Service via iconv() function with specific character sets (CVE-2026-4046)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20587" id="RHSA-2026:20587" type="rhsa" title="RHSA-2026:20587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4046" id="CVE-2026-4046" type="cve" title="CVE-2026-4046"/>
      <reference href="https://bugzilla.redhat.com/2453117" id="2453117" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20587.html" id="ALSA-2026:20587" type="self" title="ALSA-2026:20587"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="glibc-nss-devel" version="2.28" release="251.el8_10.37" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.37.src.rpm">
          <filename>glibc-nss-devel-2.28-251.el8_10.37.s390x.rpm</filename>
          <sum type="sha256">44c49fa99f4803234a6dc39168b2c1e63ee91b35a06903360779d025e8f24443</sum>
        </package>
        <package name="glibc-static" version="2.28" release="251.el8_10.37" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.37.src.rpm">
          <filename>glibc-static-2.28-251.el8_10.37.s390x.rpm</filename>
          <sum type="sha256">7fc7eb234656b785d92c11f4449c99f513c5c955330e71be7fbdf04943e3ac49</sum>
        </package>
        <package name="nss_hesiod" version="2.28" release="251.el8_10.37" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.37.src.rpm">
          <filename>nss_hesiod-2.28-251.el8_10.37.s390x.rpm</filename>
          <sum type="sha256">f8bc2163d5155358cec4360408abe7128e0aba62b9135a02d86774fa6d1624de</sum>
        </package>
        <package name="glibc-benchtests" version="2.28" release="251.el8_10.37" epoch="0" arch="s390x" src="glibc-2.28-251.el8_10.37.src.rpm">
          <filename>glibc-benchtests-2.28-251.el8_10.37.s390x.rpm</filename>
          <sum type="sha256">fbb0ea0a1a88f1d06ac94982908497740e0af95471f7690fd734b472b746908b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2081</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:53:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. (CVE-2026-23530)
  * freerdp: FreeRDP: Denial of Service and potential code execution via use-after-free vulnerability (CVE-2026-23884)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server (CVE-2026-23883)
  * freerdp: FreeRDP: Heap buffer overflow leads to denial of service and potential code execution (CVE-2026-23533)
  * freerdp: FreeRDP: Heap buffer overflow via crafted RDPGFX surface updates leads to denial of service and potential code execution. (CVE-2026-23531)
  * freerdp: FreeRDP: Arbitrary code execution and denial of service via client-side heap buffer overflow (CVE-2026-23534)
  * freerdp: FreeRDP: Denial of Service and potential code execution via client-side heap buffer overflow (CVE-2026-23532)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2081" id="RHSA-2026:2081" type="rhsa" title="RHSA-2026:2081"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23530" id="CVE-2026-23530" type="cve" title="CVE-2026-23530"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23531" id="CVE-2026-23531" type="cve" title="CVE-2026-23531"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23532" id="CVE-2026-23532" type="cve" title="CVE-2026-23532"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23533" id="CVE-2026-23533" type="cve" title="CVE-2026-23533"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23534" id="CVE-2026-23534" type="cve" title="CVE-2026-23534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23883" id="CVE-2026-23883" type="cve" title="CVE-2026-23883"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23884" id="CVE-2026-23884" type="cve" title="CVE-2026-23884"/>
      <reference href="https://bugzilla.redhat.com/2430877" id="2430877" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430880" id="2430880" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430885" id="2430885" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430886" id="2430886" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430887" id="2430887" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430888" id="2430888" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430891" id="2430891" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2081.html" id="ALSA-2026:2081" type="self" title="ALSA-2026:2081"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="2.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-2.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">5f075e2c43f8c857b60c006a58f7aaa10aa30e1376b7d5f28111e21aba763605</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2090</id>
    <title>Important: python3.12-wheel security update</title>
    <issued date="2026-02-05 00:00:00"/>
    <updated date="2026-02-06 08:49:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12-wheel security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2090" id="RHSA-2026:2090" type="rhsa" title="RHSA-2026:2090"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24049" id="CVE-2026-24049" type="cve" title="CVE-2026-24049"/>
      <reference href="https://bugzilla.redhat.com/2431959" id="2431959" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2090.html" id="ALSA-2026:2090" type="self" title="ALSA-2026:2090"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-wheel-wheel" version="0.41.2" release="4.el8_10" epoch="0" arch="noarch" src="python3.12-wheel-0.41.2-4.el8_10.src.rpm">
          <filename>python3.12-wheel-wheel-0.41.2-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">f2972c4c79c00c3b75dc72eb6ae5464b142a712b5e7edf91003658672185d0e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:20929</id>
    <title>Moderate: libexif security update</title>
    <issued date="2026-05-26 00:00:00"/>
    <updated date="2026-05-27 11:44:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>libexif security update</summary>
    <description>The libexif packages provide a library for extracting extra information from image files.  

Security Fix(es):  

  * libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  * libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding (CVE-2026-40386)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:20929" id="RHSA-2026:20929" type="rhsa" title="RHSA-2026:20929"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40385" id="CVE-2026-40385" type="cve" title="CVE-2026-40385"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40386" id="CVE-2026-40386" type="cve" title="CVE-2026-40386"/>
      <reference href="https://bugzilla.redhat.com/2457687" id="2457687" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457689" id="2457689" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-20929.html" id="ALSA-2026:20929" type="self" title="ALSA-2026:20929"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libexif-devel" version="0.6.22" release="6.el8_10" epoch="0" arch="s390x" src="libexif-0.6.22-6.el8_10.src.rpm">
          <filename>libexif-devel-0.6.22-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">da7e616cfafd7ff7a3556ffb3ed7297daa3c2f449ca7134bd387461821e428d9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21291</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-28 12:39:17"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.127 and .NET Runtime 8.0.27.Security Fix(es):  

  * serialize-javascript: serialize-javascript: Denial of Service via specially crafted array-like object serialization (CVE-2026-34043)
  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21291" id="RHSA-2026:21291" type="rhsa" title="RHSA-2026:21291"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34043" id="CVE-2026-34043" type="cve" title="CVE-2026-34043"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2453284" id="2453284" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21291.html" id="ALSA-2026:21291" type="self" title="ALSA-2026:21291"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.127" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.127-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.127-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">cdf63f4026287c49b3f3019ed6335c173df83f6e9f11119cf88585e1a8b69b18</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21294</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:45:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.117 and .NET Runtime 9.0.16.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21294" id="RHSA-2026:21294" type="rhsa" title="RHSA-2026:21294"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21294.html" id="ALSA-2026:21294" type="self" title="ALSA-2026:21294"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.117" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.117-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.117-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">850444b26c764e4f8e0ae05eaf3dcd161a9f16530ae05f33c2305268badd90e5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21295</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-05-27 00:00:00"/>
    <updated date="2026-05-29 09:45:47"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime 10.0.8.Security Fix(es):  

  * dotnet: .NET: infinite loop allows an attacker to cause a denial of service (CVE-2026-42899)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21295" id="RHSA-2026:21295" type="rhsa" title="RHSA-2026:21295"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-42899" id="CVE-2026-42899" type="cve" title="CVE-2026-42899"/>
      <reference href="https://bugzilla.redhat.com/2476605" id="2476605" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21295.html" id="ALSA-2026:21295" type="self" title="ALSA-2026:21295"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.108" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.108-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.108-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">191f18998a01f4e80a5a072122d4299bdc6a22a54d918697dafb569a28f4e0e7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:21756</id>
    <title>Important: flatpak security update</title>
    <issued date="2026-05-28 00:00:00"/>
    <updated date="2026-05-28 19:30:40"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>flatpak security update</summary>
    <description>Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.  

Security Fix(es):  

  * flatpak: Flatpak: Arbitrary code execution via crafted symlinks in sandbox-expose options (CVE-2026-34078)
  * flatpak: Flatpak: Arbitrary file deletion on host via improper cache file path validation (CVE-2026-34079)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:21756" id="RHSA-2026:21756" type="rhsa" title="RHSA-2026:21756"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34078" id="CVE-2026-34078" type="cve" title="CVE-2026-34078"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34079" id="CVE-2026-34079" type="cve" title="CVE-2026-34079"/>
      <reference href="https://bugzilla.redhat.com/2456276" id="2456276" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2456284" id="2456284" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-21756.html" id="ALSA-2026:21756" type="self" title="ALSA-2026:21756"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="flatpak-devel" version="1.12.9" release="4.el8_10" epoch="0" arch="s390x" src="flatpak-1.12.9-4.el8_10.src.rpm">
          <filename>flatpak-devel-1.12.9-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">2a965e478e89b7169d8ec63e22da17945eb219826909b17a0a12c66373096e1e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:22644</id>
    <title>Important: samba security update</title>
    <issued date="2026-06-02 00:00:00"/>
    <updated date="2026-06-03 12:02:19"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>samba security update</summary>
    <description>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.  

Security Fix(es):  

  * samba: group policy certificate enrollment uses &lt;http://&gt; without validation (CVE-2026-3012)
  * samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  * samba: Remote Code Execution in SAMR (CVE-2026-4408)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:22644" id="RHSA-2026:22644" type="rhsa" title="RHSA-2026:22644"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3012" id="CVE-2026-3012" type="cve" title="CVE-2026-3012"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4408" id="CVE-2026-4408" type="cve" title="CVE-2026-4408"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4480" id="CVE-2026-4480" type="cve" title="CVE-2026-4480"/>
      <reference href="https://bugzilla.redhat.com/2447319" id="2447319" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452232" id="2452232" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479762" id="2479762" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-22644.html" id="ALSA-2026:22644" type="self" title="ALSA-2026:22644"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libwbclient-devel" version="4.19.4" release="16.el8_10" epoch="0" arch="s390x" src="samba-4.19.4-16.el8_10.src.rpm">
          <filename>libwbclient-devel-4.19.4-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">126036e3295779858308bca16d0c1f81b70e6c008899e8ccd8672a39b113c22d</sum>
        </package>
        <package name="python3-samba-devel" version="4.19.4" release="16.el8_10" epoch="0" arch="s390x" src="samba-4.19.4-16.el8_10.src.rpm">
          <filename>python3-samba-devel-4.19.4-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">21db8a0a75a5b184ee6170754699f9c20f68479f6195030fa2dbd5143c50daff</sum>
        </package>
        <package name="libnetapi-devel" version="4.19.4" release="16.el8_10" epoch="0" arch="s390x" src="samba-4.19.4-16.el8_10.src.rpm">
          <filename>libnetapi-devel-4.19.4-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">73a1b08652465b108cca33fd24b64a693e46d0e606b1aefd214d629a2572dfd3</sum>
        </package>
        <package name="samba-devel" version="4.19.4" release="16.el8_10" epoch="0" arch="s390x" src="samba-4.19.4-16.el8_10.src.rpm">
          <filename>samba-devel-4.19.4-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">999908ca5fde6669f516a193691309ef4ce748226b1a23ef46b597476127386d</sum>
        </package>
        <package name="libsmbclient-devel" version="4.19.4" release="16.el8_10" epoch="0" arch="s390x" src="samba-4.19.4-16.el8_10.src.rpm">
          <filename>libsmbclient-devel-4.19.4-16.el8_10.s390x.rpm</filename>
          <sum type="sha256">bc2372bfa0417c4c23504c7a5fd2ab8f81593704bf6c0f1786dd3476f6a9485c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:23360</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2026-06-04 00:00:00"/>
    <updated date="2026-06-05 10:26:02"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)
  * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:23360" id="RHSA-2026:23360" type="rhsa" title="RHSA-2026:23360"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3039" id="CVE-2026-3039" type="cve" title="CVE-2026-3039"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5946" id="CVE-2026-5946" type="cve" title="CVE-2026-5946"/>
      <reference href="https://bugzilla.redhat.com/2479767" id="2479767" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2479771" id="2479771" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-23360.html" id="ALSA-2026:23360" type="self" title="ALSA-2026:23360"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.6.s390x.rpm</filename>
          <sum type="sha256">1814dac587c6ffd154d74e6275ab98487cc3945a38214e7e52255485e1158df0</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.6" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.6.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.6.noarch.rpm</filename>
          <sum type="sha256">ece652aa2d25c92daae8137e8b9884e7cd52f0db73aca39441875a1932625042</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:2419</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-11 15:30:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: Excessive read buffering DoS in http.client (CVE-2025-13836)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:2419" id="RHSA-2026:2419" type="rhsa" title="RHSA-2026:2419"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-13836" id="CVE-2025-13836" type="cve" title="CVE-2025-13836"/>
      <reference href="https://bugzilla.redhat.com/2418078" id="2418078" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-2419.html" id="ALSA-2026:2419" type="self" title="ALSA-2026:2419"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">011be900fb8917896a73febc3fc9e2aa5b4669533c297370ed6fa04ee8730f8a</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">5389de5c95d254005da743852b7455e4f8d0e8c11365888326b5abe73a29a569</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="2.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-2.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-2.el8_10.s390x.rpm</filename>
          <sum type="sha256">cc7e1714af94d6f0184c9cf799fe8f48d1dba4b1be65b24346aa53025ad72625</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:24984</id>
    <title>Important: poppler security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-10 08:21:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>poppler security update</summary>
    <description>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.  

Security Fix(es):  

  * poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:24984" id="RHSA-2026:24984" type="rhsa" title="RHSA-2026:24984"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-10118" id="CVE-2026-10118" type="cve" title="CVE-2026-10118"/>
      <reference href="https://bugzilla.redhat.com/2460428" id="2460428" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-24984.html" id="ALSA-2026:24984" type="self" title="ALSA-2026:24984"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="poppler-qt5-devel" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-qt5-devel-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">198a9de07497ee6c240b3628852a50342b4679dea68d57ed7acfdda07a37abba</sum>
        </package>
        <package name="poppler-glib-devel" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-glib-devel-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">45e6de927e296075bea49557e04ab490fe6fb98fe2f6b4622645b450bda2eb02</sum>
        </package>
        <package name="poppler-devel" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-devel-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">623d44b932a794a04c4ac6dfb71dc22e77a7ae42cd2894e3a8414f07fa923541</sum>
        </package>
        <package name="poppler-glib-doc" version="20.11.0" release="14.el8_10" epoch="0" arch="noarch" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-glib-doc-20.11.0-14.el8_10.noarch.rpm</filename>
          <sum type="sha256">7879cc7c1309a6ef41aa059987e17f8f9bfa673e56483df9be73b99ed8afb01a</sum>
        </package>
        <package name="poppler-cpp" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-cpp-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">afe3c790ee547f69940e4a4b1bcff36404e94f200aa7244007a39849964d959c</sum>
        </package>
        <package name="poppler-cpp-devel" version="20.11.0" release="14.el8_10" epoch="0" arch="s390x" src="poppler-20.11.0-14.el8_10.src.rpm">
          <filename>poppler-cpp-devel-20.11.0-14.el8_10.s390x.rpm</filename>
          <sum type="sha256">e3a208c5e0e11087cf9cb4e8b015963d68f084fb6c8aa66cc399df0239e76574</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25110</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:48:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.128 and .NET Runtime 8.0.28.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25110" id="RHSA-2026:25110" type="rhsa" title="RHSA-2026:25110"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25110.html" id="ALSA-2026:25110" type="self" title="ALSA-2026:25110"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.128" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.128-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">97c4e75f7a4642ac86798a7c2d4c73fc54d69cae2ef92834f19abacc1d9ebe86</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25113</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:46:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.118 and .NET Runtime 9.0.17.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25113" id="RHSA-2026:25113" type="rhsa" title="RHSA-2026:25113"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25113.html" id="ALSA-2026:25113" type="self" title="ALSA-2026:25113"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.118" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.118-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.118-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">e346f5b9a6d44bc3484671303fca11d6468ffa25d11564994e297b128f85c618</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:25114</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-06-10 00:00:00"/>
    <updated date="2026-06-11 08:45:32"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.109 and .NET Runtime 10.0.9.Security Fix(es):  

  * dotnet: .NET: Local file tampering via link following vulnerability (CVE-2026-45491)
  * dotnet: ASP.NET Core: Denial of Service via uncontrolled resource consumption (CVE-2026-45591)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:25114" id="RHSA-2026:25114" type="rhsa" title="RHSA-2026:25114"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45491" id="CVE-2026-45491" type="cve" title="CVE-2026-45491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-45591" id="CVE-2026-45591" type="cve" title="CVE-2026-45591"/>
      <reference href="https://bugzilla.redhat.com/2487164" id="2487164" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2487224" id="2487224" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-25114.html" id="ALSA-2026:25114" type="self" title="ALSA-2026:25114"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.109" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.109-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.109-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">3436252cdccc2abd0aec49bd6012bb587286518a159c878bb3aafc8feb6395c3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:26352</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-06-16 00:00:00"/>
    <updated date="2026-06-17 09:39:31"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects (CVE-2026-40253)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:26352" id="RHSA-2026:26352" type="rhsa" title="RHSA-2026:26352"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-40253" id="CVE-2026-40253" type="cve" title="CVE-2026-40253"/>
      <reference href="https://bugzilla.redhat.com/2459076" id="2459076" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-26352.html" id="ALSA-2026:26352" type="self" title="ALSA-2026:26352"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="opencryptoki-devel" version="3.22.0" release="3.el8_10.3" epoch="0" arch="s390x" src="opencryptoki-3.22.0-3.el8_10.3.src.rpm">
          <filename>opencryptoki-devel-3.22.0-3.el8_10.3.s390x.rpm</filename>
          <sum type="sha256">bb3f3010b566b517e8d403af31c020c635e6196d52430ef43e0af482b5a02158</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3032</id>
    <title>Important: munge security update</title>
    <issued date="2026-02-23 00:00:00"/>
    <updated date="2026-02-23 14:44:18"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>munge security update</summary>
    <description>MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.  

Security Fix(es):  

  * MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery (CVE-2026-25506)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3032" id="RHSA-2026:3032" type="rhsa" title="RHSA-2026:3032"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25506" id="CVE-2026-25506" type="cve" title="CVE-2026-25506"/>
      <reference href="https://bugzilla.redhat.com/2438715" id="2438715" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3032.html" id="ALSA-2026:3032" type="self" title="ALSA-2026:3032"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="munge-devel" version="0.5.13" release="3.el8_10" epoch="0" arch="s390x" src="munge-0.5.13-3.el8_10.src.rpm">
          <filename>munge-devel-0.5.13-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">3137a0f7e410991d402ac896d94fd010d403108eac7cb2930d77ed72359b53f8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3334</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-26 09:39:11"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22855)
  * freerdp: FreeRDP global-buffer-overflow (CVE-2026-22858)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22859)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3334" id="RHSA-2026:3334" type="rhsa" title="RHSA-2026:3334"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22855" id="CVE-2026-22855" type="cve" title="CVE-2026-22855"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22858" id="CVE-2026-22858" type="cve" title="CVE-2026-22858"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22859" id="CVE-2026-22859" type="cve" title="CVE-2026-22859"/>
      <reference href="https://bugzilla.redhat.com/2429645" id="2429645" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429649" id="2429649" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429653" id="2429653" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3334.html" id="ALSA-2026:3334" type="self" title="ALSA-2026:3334"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="3.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-3.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">dd42c66533015bc93fada4db3657177ca6c914879ed70e56a11cdd68fafbfa47</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3407</id>
    <title>Important: mingw-fontconfig security update</title>
    <issued date="2026-02-26 00:00:00"/>
    <updated date="2026-03-02 15:16:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-fontconfig security update</summary>
    <description>MinGW Windows Fontconfig library.  

Security Fix(es):  

  * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing (CVE-2025-59375)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3407" id="RHSA-2026:3407" type="rhsa" title="RHSA-2026:3407"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-59375" id="CVE-2025-59375" type="cve" title="CVE-2025-59375"/>
      <reference href="https://bugzilla.redhat.com/2395108" id="2395108" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3407.html" id="ALSA-2026:3407" type="self" title="ALSA-2026:3407"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw64-fontconfig" version="2.12.6" release="4.el8_10" epoch="0" arch="noarch" src="mingw-fontconfig-2.12.6-4.el8_10.src.rpm">
          <filename>mingw64-fontconfig-2.12.6-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">16f214735b967fabb3c11045ccf98e10732abe4cc8ed318a9b267cf3c3d685a8</sum>
        </package>
        <package name="mingw32-fontconfig" version="2.12.6" release="4.el8_10" epoch="0" arch="noarch" src="mingw-fontconfig-2.12.6-4.el8_10.src.rpm">
          <filename>mingw32-fontconfig-2.12.6-4.el8_10.noarch.rpm</filename>
          <sum type="sha256">1b44343b712cc0b7e26c087c3571c3cb404f8063bc443d4f72f64e8ea9ccdfff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3938</id>
    <title>Moderate: nfs-utils security update</title>
    <issued date="2026-03-05 00:00:00"/>
    <updated date="2026-03-10 01:58:44"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>nfs-utils security update</summary>
    <description>The nfs-utils packages provide a daemon for the kernel Network File System (NFS) server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs.   

Security Fix(es):  

  * nfs-utils: rpc.mountd in the nfs-utils privilege escalation (CVE-2025-12801)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3938" id="RHSA-2026:3938" type="rhsa" title="RHSA-2026:3938"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-12801" id="CVE-2025-12801" type="cve" title="CVE-2025-12801"/>
      <reference href="https://bugzilla.redhat.com/2413081" id="2413081" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3938.html" id="ALSA-2026:3938" type="self" title="ALSA-2026:3938"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libnfsidmap-devel" version="2.3.3" release="68.el8_10" epoch="1" arch="s390x" src="nfs-utils-2.3.3-68.el8_10.src.rpm">
          <filename>libnfsidmap-devel-2.3.3-68.el8_10.s390x.rpm</filename>
          <sum type="sha256">ed13ef1a7a8325c8c6f0526df5a660f302c3cc9b30e9f0c839a900689b48835e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:3967</id>
    <title>Important: libvpx security update</title>
    <issued date="2026-03-09 00:00:00"/>
    <updated date="2026-03-10 01:53:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libvpx security update</summary>
    <description>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.  

Security Fix(es):  

  * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:3967" id="RHSA-2026:3967" type="rhsa" title="RHSA-2026:3967"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2447" id="CVE-2026-2447" type="cve" title="CVE-2026-2447"/>
      <reference href="https://bugzilla.redhat.com/2440219" id="2440219" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-3967.html" id="ALSA-2026:3967" type="self" title="ALSA-2026:3967"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libvpx-devel" version="1.7.0" release="13.el8_10" epoch="0" arch="s390x" src="libvpx-1.7.0-13.el8_10.src.rpm">
          <filename>libvpx-devel-1.7.0-13.el8_10.s390x.rpm</filename>
          <sum type="sha256">ef9beb27b18e317090c4527b90a603a083067ac94209a5a36a44b3e4c4b588dd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4306</id>
    <title>Important: mingw-libpng security update</title>
    <issued date="2026-03-11 00:00:00"/>
    <updated date="2026-03-13 12:35:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>mingw-libpng security update</summary>
    <description>MinGW Windows Libpng library.  

Security Fix(es):  

  * libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801)
  * libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695)
  * libpng: LIBPNG has a heap buffer overflow in png_set_quantize (CVE-2026-25646)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4306" id="RHSA-2026:4306" type="rhsa" title="RHSA-2026:4306"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22695" id="CVE-2026-22695" type="cve" title="CVE-2026-22695"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22801" id="CVE-2026-22801" type="cve" title="CVE-2026-22801"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-25646" id="CVE-2026-25646" type="cve" title="CVE-2026-25646"/>
      <reference href="https://bugzilla.redhat.com/2428824" id="2428824" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2428825" id="2428825" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438542" id="2438542" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4306.html" id="ALSA-2026:4306" type="self" title="ALSA-2026:4306"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="mingw32-libpng-static" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw32-libpng-static-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">1b4e866aa9f12c2b2a8503a8ece57d9e31c842b3c25daa95087424b216072618</sum>
        </package>
        <package name="mingw32-libpng" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw32-libpng-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">6629fc3c6dac20f23fbfdf09f1a9f6c186a37da8dce090e014bfc8e19fda9dd3</sum>
        </package>
        <package name="mingw64-libpng" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw64-libpng-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">6b85fa312b59c2397301d6448c684841831e6083445797611d5a055b6e9adfb3</sum>
        </package>
        <package name="mingw64-libpng-static" version="1.6.34" release="2.el8_10" epoch="0" arch="noarch" src="mingw-libpng-1.6.34-2.el8_10.src.rpm">
          <filename>mingw64-libpng-static-1.6.34-2.el8_10.noarch.rpm</filename>
          <sum type="sha256">e201770a44f5e037fcc204982c4aa02ebcba03dd6295ed9ff60025246890cad1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4443</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:01:03"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.115 and .NET Runtime 9.0.14.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4443" id="RHSA-2026:4443" type="rhsa" title="RHSA-2026:4443"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4443.html" id="ALSA-2026:4443" type="self" title="ALSA-2026:4443"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.115" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.115-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.115-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">6af95ec13cafaec9a1bba43f9eeca6a2192cd50c0398f2ffbfd0d19900267792</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4455</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:11:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.125 and .NET Runtime 8.0.25.Security Fix(es):  

  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4455" id="RHSA-2026:4455" type="rhsa" title="RHSA-2026:4455"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4455.html" id="ALSA-2026:4455" type="self" title="ALSA-2026:4455"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.125" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.125-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.125-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">a941275523460f65e72195f5f3d1b458eebb6775b661426b8073fef619a6f0b9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4458</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:14:38"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.104 and .NET Runtime 10.0.4.Security Fix(es):  

  * .net: .NET: Denial of Service via out-of-bounds read (CVE-2026-26127)
  * asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation (CVE-2026-26130)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4458" id="RHSA-2026:4458" type="rhsa" title="RHSA-2026:4458"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26127" id="CVE-2026-26127" type="cve" title="CVE-2026-26127"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26130" id="CVE-2026-26130" type="cve" title="CVE-2026-26130"/>
      <reference href="https://bugzilla.redhat.com/2446098" id="2446098" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2446134" id="2446134" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4458.html" id="ALSA-2026:4458" type="self" title="ALSA-2026:4458"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.104" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.104-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.104-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c139774d4b66ab0f9cc3b5bbd5c9b7889a2f9439a5c92c00938381b909b922ff</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4463</id>
    <title>Moderate: python3.12 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-13 09:03:56"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4463" id="RHSA-2026:4463" type="rhsa" title="RHSA-2026:4463"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4463.html" id="ALSA-2026:4463" type="self" title="ALSA-2026:4463"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-test" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">402d0c2df58cf856e884dc3d1572975f2e6ada9813c3c34d70b28afbb70c419c</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">66a8028ca352b751c788e933e39d1a25b1f4133fe99c6ef973da57a5f4a24373</sum>
        </package>
        <package name="python3.12-debug" version="3.12.12" release="3.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-3.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-3.el8_10.s390x.rpm</filename>
          <sum type="sha256">d433f9e68a55d6af047a6a22e5fcb2974178e3f62996306824f869f8c0424baa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:4473</id>
    <title>Moderate: python3.11 security update</title>
    <issued date="2026-03-12 00:00:00"/>
    <updated date="2026-03-19 12:33:15"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * cpython: wsgiref.headers.Headers allows header newline injection in Python (CVE-2026-0865)
  * cpython: IMAP command injection in user-controlled commands (CVE-2025-15366)
  * cpython: POP3 command injection in user-controlled commands (CVE-2025-15367)
  * cpython: email header injection due to unquoted newlines (CVE-2026-1299)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:4473" id="RHSA-2026:4473" type="rhsa" title="RHSA-2026:4473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15366" id="CVE-2025-15366" type="cve" title="CVE-2025-15366"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15367" id="CVE-2025-15367" type="cve" title="CVE-2025-15367"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-0865" id="CVE-2026-0865" type="cve" title="CVE-2026-0865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1299" id="CVE-2026-1299" type="cve" title="CVE-2026-1299"/>
      <reference href="https://bugzilla.redhat.com/2431367" id="2431367" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431368" id="2431368" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2431373" id="2431373" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2432437" id="2432437" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-4473.html" id="ALSA-2026:4473" type="self" title="ALSA-2026:4473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-debug" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">4441e04156b0517becd8fad633cec7f9198778463260c678dbf704e483df30a5</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">6ba7f03117949f3119f8530d7a62926618db2e5ada5093f74618402d3732d88c</sum>
        </package>
        <package name="python3.11-test" version="3.11.13" release="5.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-5.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-5.el8_10.s390x.rpm</filename>
          <sum type="sha256">9e11834c68fdfb43bb1383d3eeddbde3ebd09caab9d0b4798a903ebabe929210</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5578</id>
    <title>Moderate: virt:rhel and virt-devel:rhel security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 12:58:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>virt:rhel and virt-devel:rhel security update</summary>
    <description>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.  

Security Fix(es):  

  * qemu-kvm: VNC WebSocket handshake use-after-free (CVE-2025-11234)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5578" id="RHSA-2026:5578" type="rhsa" title="RHSA-2026:5578"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-11234" id="CVE-2025-11234" type="cve" title="CVE-2025-11234"/>
      <reference href="https://bugzilla.redhat.com/2401209" id="2401209" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5578.html" id="ALSA-2026:5578" type="self" title="ALSA-2026:5578"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <module name="virt" stream="rhel" version="8100020240924083209" context="9edba152" arch="s390x"/>
        <package name="ocaml-libguestfs-devel" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">211e7950c6fa92f16c7533aa0a43fe1f09ae307d1aa6ad0d45d696a9458cfe60</sum>
        </package>
        <package name="ocaml-hivex-devel" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-devel-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">3cb87ceefccfbb7a8d04ef2e43dae5feb1c6f7e8b154da3ddada24dccf1a6992</sum>
        </package>
        <package name="ocaml-hivex" version="1.3.18" release="23.module_el8.6.0+3161+a07c0ea5" epoch="0" arch="s390x" src="hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.src.rpm">
          <filename>ocaml-hivex-1.3.18-23.module_el8.6.0+3161+a07c0ea5.s390x.rpm</filename>
          <sum type="sha256">668c69874722e2b17bbf78a36d69fed4df6a4f3be26e8d837dd91b63cba131fa</sum>
        </package>
        <package name="ocaml-libnbd-devel" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-devel-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">90ccfe2af537cb98179d4dbf1907af3506728fa8c2748d797958d22c7e889dc5</sum>
        </package>
        <package name="qemu-kvm-tests" version="6.2.0" release="53.module_el8.10.0+4110+4a319788.6" epoch="15" arch="s390x" src="qemu-kvm-6.2.0-53.module_el8.10.0+4110+4a319788.6.src.rpm">
          <filename>qemu-kvm-tests-6.2.0-53.module_el8.10.0+4110+4a319788.6.s390x.rpm</filename>
          <sum type="sha256">949022c39130dc7bc8e75abe3049730844f9da0be647361450bcae2fafc671f3</sum>
        </package>
        <package name="ocaml-libnbd" version="1.6.0" release="6.module_el8.10.0+3897+eb84924d" epoch="0" arch="s390x" src="libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.src.rpm">
          <filename>ocaml-libnbd-1.6.0-6.module_el8.10.0+3897+eb84924d.s390x.rpm</filename>
          <sum type="sha256">e62f8c5d04ef78db7902103af065899d2ac4ac49c260f604c7f99ec07f06de7b</sum>
        </package>
        <package name="ocaml-libguestfs" version="1.44.0" release="9.module_el8.7.0+3493+5ed0bd1c.alma" epoch="1" arch="s390x" src="libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.src.rpm">
          <filename>ocaml-libguestfs-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.s390x.rpm</filename>
          <sum type="sha256">eeeeb7c3edf6f426822a9827b09cdfbe68a4e42d91b034f7b3e9d78b834ae3c7</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:5587</id>
    <title>Moderate: opencryptoki security update</title>
    <issued date="2026-03-24 00:00:00"/>
    <updated date="2026-03-26 10:46:54"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Moderate</severity>
    <summary>opencryptoki security update</summary>
    <description>The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon (pkcsslotd) and general utilities.  

Security Fix(es):  

  * openCryptoki: openCryptoki: Privilege Escalation or Data Exposure via Symlink Following (CVE-2026-23893)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:5587" id="RHSA-2026:5587" type="rhsa" title="RHSA-2026:5587"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23893" id="CVE-2026-23893" type="cve" title="CVE-2026-23893"/>
      <reference href="https://bugzilla.redhat.com/2431909" id="2431909" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-5587.html" id="ALSA-2026:5587" type="self" title="ALSA-2026:5587"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="opencryptoki-devel" version="3.22.0" release="3.el8_10.2" epoch="0" arch="s390x" src="opencryptoki-3.22.0-3.el8_10.2.src.rpm">
          <filename>opencryptoki-devel-3.22.0-3.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">d1a54c72ab5d239f3bb4df51adcf5661f68cbe367875410930fbb3fc6a8a4c87</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6005</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-03-30 00:00:00"/>
    <updated date="2026-04-02 08:59:26"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path (CVE-2026-26965)
  * freerdp: FreeRDP: Arbitrary code execution via heap buffer overflow in GDI surface pipeline (CVE-2026-26955)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6005" id="RHSA-2026:6005" type="rhsa" title="RHSA-2026:6005"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26955" id="CVE-2026-26955" type="cve" title="CVE-2026-26955"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26965" id="CVE-2026-26965" type="cve" title="CVE-2026-26965"/>
      <reference href="https://bugzilla.redhat.com/2442959" id="2442959" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2443132" id="2443132" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6005.html" id="ALSA-2026:6005" type="self" title="ALSA-2026:6005"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="4.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-4.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">d74eab88b5e3696bbcc3fc19c11733979f0139ab940ce556ee07a78fa8335e71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6281</id>
    <title>Important: python3.11 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 08:52:16"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.11 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6281" id="RHSA-2026:6281" type="rhsa" title="RHSA-2026:6281"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6281.html" id="ALSA-2026:6281" type="self" title="ALSA-2026:6281"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.11-test" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-test-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">446e5d7189903fee6f7b00e77b2db55d3a5f1458ec8a00deb8bf19361d317806</sum>
        </package>
        <package name="python3.11-idle" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-idle-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">98043a8786284657baa5efcfd0003a6ba3b5bdb789f8edcf4a2bed7cae2e416b</sum>
        </package>
        <package name="python3.11-debug" version="3.11.13" release="6.el8_10" epoch="0" arch="s390x" src="python3.11-3.11.13-6.el8_10.src.rpm">
          <filename>python3.11-debug-3.11.13-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">ec4a0fadef9aa3df261c66d4a6bae9c4097eaf8ec5e198be1b3da42c76ea4684</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6283</id>
    <title>Important: python3.12 security update</title>
    <issued date="2026-03-31 00:00:00"/>
    <updated date="2026-04-01 08:56:48"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>python3.12 security update</summary>
    <description>Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  

Security Fix(es):  

  * python: Python: Command-line option injection in webbrowser.open() via crafted URLs (CVE-2026-4519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6283" id="RHSA-2026:6283" type="rhsa" title="RHSA-2026:6283"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4519" id="CVE-2026-4519" type="cve" title="CVE-2026-4519"/>
      <reference href="https://bugzilla.redhat.com/2449649" id="2449649" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6283.html" id="ALSA-2026:6283" type="self" title="ALSA-2026:6283"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="python3.12-debug" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-debug-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">61a071e0133420496aa4dab6f3df8d53dda49894539135714a47d528c7032060</sum>
        </package>
        <package name="python3.12-test" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-test-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">d4746a385735027fbc17ee5b81096b03bf04be6c782eb4859ef3e41c8b4c7d48</sum>
        </package>
        <package name="python3.12-idle" version="3.12.12" release="4.el8_10" epoch="0" arch="s390x" src="python3.12-3.12.12-4.el8_10.src.rpm">
          <filename>python3.12-idle-3.12.12-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">f5f145a271479ad5f49a68ed70edfa80b42f2db46b04e0988ea9c515bf72b254</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6470</id>
    <title>Important: perl-YAML-Syck security update</title>
    <issued date="2026-04-02 00:00:00"/>
    <updated date="2026-04-03 12:07:59"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>perl-YAML-Syck security update</summary>
    <description>This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around.  

Security Fix(es):  

  * perl-YAML-Syck: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter (CVE-2026-4177)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6470" id="RHSA-2026:6470" type="rhsa" title="RHSA-2026:6470"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4177" id="CVE-2026-4177" type="cve" title="CVE-2026-4177"/>
      <reference href="https://bugzilla.redhat.com/2448277" id="2448277" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6470.html" id="ALSA-2026:6470" type="self" title="ALSA-2026:6470"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="perl-YAML-Syck" version="1.30" release="6.el8_10" epoch="0" arch="s390x" src="perl-YAML-Syck-1.30-6.el8_10.src.rpm">
          <filename>perl-YAML-Syck-1.30-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">22a6d709546c127dfe4733f4dd57f728fa350b0b2e3863341c212181a223697b</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6750</id>
    <title>Important: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 12:28:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good security update</summary>
    <description>GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.  

Security Fix(es):  

  * GStreamer: GStreamer: Arbitrary code execution via ASF file processing (CVE-2026-2920)
  * GStreamer: GStreamer: Remote Code Execution via heap-based buffer overflow in JPEG parser (CVE-2026-3082)
  * GStreamer: GStreamer: Remote Code Execution via Heap-based Buffer Overflow in rtpqdm2depay (CVE-2026-3085)
  * GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling (CVE-2026-2921)
  * GStreamer: GStreamer: Remote Code Execution via Out-Of-Bounds Write in rtpqdm2depay (CVE-2026-3083)
  * GStreamer: GStreamer: Remote Code Execution via out-of-bounds write in DVB Subtitles handling (CVE-2026-2923)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6750" id="RHSA-2026:6750" type="rhsa" title="RHSA-2026:6750"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2920" id="CVE-2026-2920" type="cve" title="CVE-2026-2920"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2921" id="CVE-2026-2921" type="cve" title="CVE-2026-2921"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-2923" id="CVE-2026-2923" type="cve" title="CVE-2026-2923"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3082" id="CVE-2026-3082" type="cve" title="CVE-2026-3082"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3083" id="CVE-2026-3083" type="cve" title="CVE-2026-3083"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-3085" id="CVE-2026-3085" type="cve" title="CVE-2026-3085"/>
      <reference href="https://bugzilla.redhat.com/2447490" id="2447490" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447492" id="2447492" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447495" id="2447495" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447496" id="2447496" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447498" id="2447498" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447503" id="2447503" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6750.html" id="ALSA-2026:6750" type="self" title="ALSA-2026:6750"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="gstreamer1-plugins-bad-free-devel" version="1.16.1" release="6.el8_10" epoch="0" arch="s390x" src="gstreamer1-plugins-bad-free-1.16.1-6.el8_10.src.rpm">
          <filename>gstreamer1-plugins-bad-free-devel-1.16.1-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">aef6f5a65e457aaf86bb57cf4a979017558054000b6718eb30c43786433cb84c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:6918</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-07 00:00:00"/>
    <updated date="2026-04-09 10:17:33"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * freerdp: FreeRDP heap-use-after-free (CVE-2026-22856)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22854)
  * freerdp: FreeRDP heap-buffer-overflow (CVE-2026-22852)
  * freerdp: FreeRDP: Denial of Service via FastGlyph parsing buffer overflow (CVE-2026-23732)
  * freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation (CVE-2026-24676)
  * freerdp: FreeRDP has a heap-use-after-free in video_timer (CVE-2026-24491)
  * freerdp: FreeRDP has a NULL Pointer Dereference in rdp_write_logon_info_v2() (CVE-2026-23948)
  * freerdp: FreeRDP has a Heap-use-after-free in play_thread (CVE-2026-24684)
  * freerdp: FreeRDP has a heap-use-after-free in urb_bulk_transfer_cb (CVE-2026-24681)
  * freerdp: FreeRDP has a heap-use-after-free in ainput_send_input_event (CVE-2026-24683)
  * freerdp: FreeRDP has a heap-buffer-overflow in urb_select_interface (CVE-2026-24679)
  * freerdp: FreeRDP has a Heap-use-after-free in urb_select_interface (CVE-2026-24675)
  * freerdp: FreeRDP: Arbitrary code execution via crafted Remote Desktop Protocol (RDP) server messages (CVE-2026-31806)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:6918" id="RHSA-2026:6918" type="rhsa" title="RHSA-2026:6918"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22852" id="CVE-2026-22852" type="cve" title="CVE-2026-22852"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22854" id="CVE-2026-22854" type="cve" title="CVE-2026-22854"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22856" id="CVE-2026-22856" type="cve" title="CVE-2026-22856"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23732" id="CVE-2026-23732" type="cve" title="CVE-2026-23732"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23948" id="CVE-2026-23948" type="cve" title="CVE-2026-23948"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24491" id="CVE-2026-24491" type="cve" title="CVE-2026-24491"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24675" id="CVE-2026-24675" type="cve" title="CVE-2026-24675"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24676" id="CVE-2026-24676" type="cve" title="CVE-2026-24676"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24679" id="CVE-2026-24679" type="cve" title="CVE-2026-24679"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24681" id="CVE-2026-24681" type="cve" title="CVE-2026-24681"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24683" id="CVE-2026-24683" type="cve" title="CVE-2026-24683"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-24684" id="CVE-2026-24684" type="cve" title="CVE-2026-24684"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-31806" id="CVE-2026-31806" type="cve" title="CVE-2026-31806"/>
      <reference href="https://bugzilla.redhat.com/2429650" id="2429650" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429652" id="2429652" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2429654" id="2429654" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2430881" id="2430881" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438201" id="2438201" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438202" id="2438202" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438207" id="2438207" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438208" id="2438208" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438210" id="2438210" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438216" id="2438216" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438217" id="2438217" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2438221" id="2438221" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2447376" id="2447376" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-6918.html" id="ALSA-2026:6918" type="self" title="ALSA-2026:6918"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="6.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-6.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-6.el8_10.s390x.rpm</filename>
          <sum type="sha256">8b92bf22900633fa33c4330e3792521cd2d692d7033db3622bc2f4e1a3ea8b71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7667</id>
    <title>Important: nghttp2 security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-14 07:31:09"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>nghttp2 security update</summary>
    <description>libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.  

Security Fix(es):  

  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7667" id="RHSA-2026:7667" type="rhsa" title="RHSA-2026:7667"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27135" id="CVE-2026-27135" type="cve" title="CVE-2026-27135"/>
      <reference href="https://bugzilla.redhat.com/2448754" id="2448754" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7667.html" id="ALSA-2026:7667" type="self" title="ALSA-2026:7667"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="nghttp2" version="1.33.0" release="6.el8_10.2" epoch="0" arch="s390x" src="nghttp2-1.33.0-6.el8_10.2.src.rpm">
          <filename>nghttp2-1.33.0-6.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">137f313b4692b6ac46021a864364dcc2c3bd01f9568840523ef7f7b8f0bcf945</sum>
        </package>
        <package name="libnghttp2-devel" version="1.33.0" release="6.el8_10.2" epoch="0" arch="s390x" src="nghttp2-1.33.0-6.el8_10.2.src.rpm">
          <filename>libnghttp2-devel-1.33.0-6.el8_10.2.s390x.rpm</filename>
          <sum type="sha256">87cf31a14af0ab7487ce5b5d27b76fa49cb35ed5a92fd9e4d7e7a94f91dc6318</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:7677</id>
    <title>Important: fontforge security update</title>
    <issued date="2026-04-13 00:00:00"/>
    <updated date="2026-04-15 07:47:46"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>fontforge security update</summary>
    <description>FontForge is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript (ASCII and binary Type 1, some Type 3 and Type 0), TrueType, OpenType (Type2) and CID-keyed fonts.   

Security Fix(es):  

  * fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing (CVE-2025-15279)
  * fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing (CVE-2025-15269)
  * fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow (CVE-2025-15275)
  * fontforge: FontForge: Remote Code Execution via malicious SFD file parsing (CVE-2025-15270)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:7677" id="RHSA-2026:7677" type="rhsa" title="RHSA-2026:7677"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15269" id="CVE-2025-15269" type="cve" title="CVE-2025-15269"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15270" id="CVE-2025-15270" type="cve" title="CVE-2025-15270"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15275" id="CVE-2025-15275" type="cve" title="CVE-2025-15275"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2025-15279" id="CVE-2025-15279" type="cve" title="CVE-2025-15279"/>
      <reference href="https://bugzilla.redhat.com/2426421" id="2426421" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426423" id="2426423" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426429" id="2426429" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2426434" id="2426434" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-7677.html" id="ALSA-2026:7677" type="self" title="ALSA-2026:7677"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="fontforge" version="20200314" release="7.el8_10" epoch="0" arch="s390x" src="fontforge-20200314-7.el8_10.src.rpm">
          <filename>fontforge-20200314-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">135e7ea09c0eacabb3a2ce7abd963490058c4086095264c9ef844aa0d571e515</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8155</id>
    <title>Important: bind9.16 security update</title>
    <issued date="2026-04-14 00:00:00"/>
    <updated date="2026-04-15 07:11:52"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>bind9.16 security update</summary>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  

Security Fix(es):  

  * bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8155" id="RHSA-2026:8155" type="rhsa" title="RHSA-2026:8155"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-1519" id="CVE-2026-1519" type="cve" title="CVE-2026-1519"/>
      <reference href="https://bugzilla.redhat.com/2451305" id="2451305" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8155.html" id="ALSA-2026:8155" type="self" title="ALSA-2026:8155"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="bind9.16-devel" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="s390x" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-devel-9.16.23-0.22.el8_10.5.s390x.rpm</filename>
          <sum type="sha256">9ea2f141866df8faf96890dfa728cdd4aff324d00375257309b9d69e83c9d8c9</sum>
        </package>
        <package name="bind9.16-doc" version="9.16.23" release="0.22.el8_10.5" epoch="32" arch="noarch" src="bind9.16-9.16.23-0.22.el8_10.5.src.rpm">
          <filename>bind9.16-doc-9.16.23-0.22.el8_10.5.noarch.rpm</filename>
          <sum type="sha256">bb4e5e4e4888f51e6d80dbcff746cda4b667b85bd5aa8d057d44fee8cb55060a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8468</id>
    <title>Important: .NET 8.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:45:10"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 8.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK SDK_VERSION and .NET Runtime RUNTIME_VERSION.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8468" id="RHSA-2026:8468" type="rhsa" title="RHSA-2026:8468"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8468.html" id="ALSA-2026:8468" type="self" title="ALSA-2026:8468"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-8.0-source-built-artifacts" version="8.0.126" release="1.el8_10" epoch="0" arch="s390x" src="dotnet8.0-8.0.126-1.el8_10.src.rpm">
          <filename>dotnet-sdk-8.0-source-built-artifacts-8.0.126-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c32a5ed44e5c8a391de2d4ce90a8a1ef597f54ea2049bccc1030aec22faac49a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8473</id>
    <title>Important: .NET 10.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:43:07"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 10.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.106 and .NET Runtime 10.0.6.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8473" id="RHSA-2026:8473" type="rhsa" title="RHSA-2026:8473"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8473.html" id="ALSA-2026:8473" type="self" title="ALSA-2026:8473"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-10.0-source-built-artifacts" version="10.0.106" release="1.el8_10" epoch="0" arch="s390x" src="dotnet10.0-10.0.106-1.el8_10.src.rpm">
          <filename>dotnet-sdk-10.0-source-built-artifacts-10.0.106-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">343bf14f4e4d6f6cb9eadf8391d0c3ea34a12de08909cea295100affbf958f8d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8475</id>
    <title>Important: .NET 9.0 security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:40:28"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>.NET 9.0 security update</summary>
    <description>.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.  

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.116 and .NET Runtime 9.0.15.Security Fix(es):  

  * dotnet: .NET: Security Bypass and Denial of Service Vulnerability (CVE-2026-26171)
  * dotnet: .NET: Denial of Service via stack overflow (CVE-2026-32203)
  * dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform (CVE-2026-33116)
  * dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw (CVE-2026-32178)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8475" id="RHSA-2026:8475" type="rhsa" title="RHSA-2026:8475"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-26171" id="CVE-2026-26171" type="cve" title="CVE-2026-26171"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32178" id="CVE-2026-32178" type="cve" title="CVE-2026-32178"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-32203" id="CVE-2026-32203" type="cve" title="CVE-2026-32203"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33116" id="CVE-2026-33116" type="cve" title="CVE-2026-33116"/>
      <reference href="https://bugzilla.redhat.com/2457739" id="2457739" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457740" id="2457740" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457741" id="2457741" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2457781" id="2457781" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8475.html" id="ALSA-2026:8475" type="self" title="ALSA-2026:8475"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="dotnet-sdk-9.0-source-built-artifacts" version="9.0.116" release="1.el8_10" epoch="0" arch="s390x" src="dotnet9.0-9.0.116-1.el8_10.src.rpm">
          <filename>dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.el8_10.s390x.rpm</filename>
          <sum type="sha256">c1389e334516ef8593da3428cdb4c9274e056e1f15769dd682cffe8aad4adbf1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8534</id>
    <title>Important: libarchive security update</title>
    <issued date="2026-04-16 00:00:00"/>
    <updated date="2026-04-20 08:36:24"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>libarchive security update</summary>
    <description>The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.  

Security Fix(es):  

  * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
  * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8534" id="RHSA-2026:8534" type="rhsa" title="RHSA-2026:8534"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-4424" id="CVE-2026-4424" type="cve" title="CVE-2026-4424"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-5121" id="CVE-2026-5121" type="cve" title="CVE-2026-5121"/>
      <reference href="https://bugzilla.redhat.com/2449006" id="2449006" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2452945" id="2452945" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8534.html" id="ALSA-2026:8534" type="self" title="ALSA-2026:8534"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="libarchive-devel" version="3.3.3" release="7.el8_10" epoch="0" arch="s390x" src="libarchive-3.3.3-7.el8_10.src.rpm">
          <filename>libarchive-devel-3.3.3-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">6f7aa68b5ec426dd44a9de559a1e27afbee8290606a3ed53305daa23610839a0</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8861</id>
    <title>Important: giflib security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:36:08"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>giflib security update</summary>
    <description>giflib is a library for reading and writing gif images.  

Security Fix(es):  

  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8861" id="RHSA-2026:8861" type="rhsa" title="RHSA-2026:8861"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23868" id="CVE-2026-23868" type="cve" title="CVE-2026-23868"/>
      <reference href="https://bugzilla.redhat.com/2446207" id="2446207" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8861.html" id="ALSA-2026:8861" type="self" title="ALSA-2026:8861"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="giflib-devel" version="5.1.4" release="4.el8_10" epoch="0" arch="s390x" src="giflib-5.1.4-4.el8_10.src.rpm">
          <filename>giflib-devel-5.1.4-4.el8_10.s390x.rpm</filename>
          <sum type="sha256">f39215aa577fa02b453214851a8fde4ba3d2f779470decf89f0a194230787130</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8863</id>
    <title>Important: OpenEXR security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-30 07:37:50"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>OpenEXR security update</summary>
    <description>OpenEXR is a high dynamic-range (HDR) image file format developed by Industrial Light &amp; Magic for use in computer imaging applications. This package contains libraries and sample applications for handling the format.   

Security Fix(es):  

  * openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing (CVE-2026-27622)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8863" id="RHSA-2026:8863" type="rhsa" title="RHSA-2026:8863"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-27622" id="CVE-2026-27622" type="cve" title="CVE-2026-27622"/>
      <reference href="https://bugzilla.redhat.com/2444251" id="2444251" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8863.html" id="ALSA-2026:8863" type="self" title="ALSA-2026:8863"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="OpenEXR-devel" version="2.2.0" release="12.el8_10.1" epoch="0" arch="s390x" src="OpenEXR-2.2.0-12.el8_10.1.src.rpm">
          <filename>OpenEXR-devel-2.2.0-12.el8_10.1.s390x.rpm</filename>
          <sum type="sha256">603b6cf2e6281fca5658428d1423b09e764d7f05892d63e80e78959ab4356b3f</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:8945</id>
    <title>Important: freerdp security update</title>
    <issued date="2026-04-20 00:00:00"/>
    <updated date="2026-04-20 12:43:13"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>freerdp security update</summary>
    <description>FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.  

Security Fix(es):  

  * FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
  * FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:8945" id="RHSA-2026:8945" type="rhsa" title="RHSA-2026:8945"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33983" id="CVE-2026-33983" type="cve" title="CVE-2026-33983"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-33984" id="CVE-2026-33984" type="cve" title="CVE-2026-33984"/>
      <reference href="https://bugzilla.redhat.com/2453219" id="2453219" type="bugzilla" title=""/>
      <reference href="https://bugzilla.redhat.com/2453220" id="2453220" type="bugzilla" title=""/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-8945.html" id="ALSA-2026:8945" type="self" title="ALSA-2026:8945"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="freerdp-devel" version="2.11.7" release="7.el8_10" epoch="2" arch="s390x" src="freerdp-2.11.7-7.el8_10.src.rpm">
          <filename>freerdp-devel-2.11.7-7.el8_10.s390x.rpm</filename>
          <sum type="sha256">d021a9f66b1ceba04dd728f253f043562fb096e30055c9ce9d67df423b2d6e90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9686</id>
    <title>Important: java-17-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-28 13:20:39"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-17-openjdk security update</summary>
    <description>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9686" id="RHSA-2026:9686" type="rhsa" title="RHSA-2026:9686"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9686.html" id="ALSA-2026:9686" type="self" title="ALSA-2026:9686"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-17-openjdk-demo-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-demo-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">137dedea8f054d74798c35051d06d874f77734fd1b9eca8b84623b60e3ed1ae4</sum>
        </package>
        <package name="java-17-openjdk-devel-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-devel-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">15d0f1893476994274cd3cf3cebf23d0f67d8ccbf262fe85e16511cae7094b34</sum>
        </package>
        <package name="java-17-openjdk-src-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-src-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">2932b288d2565b200d65d3aa666635037d4491ed2aa3a75195e6b90feb0d1238</sum>
        </package>
        <package name="java-17-openjdk-headless-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-headless-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">6e459159663c913616208ddf8621134dfcd198b5c6dcf43227fd1dbe17dd9e16</sum>
        </package>
        <package name="java-17-openjdk-static-libs-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">7e52a1129e99c4dad8a80e50008095724fa8a42c4d4c28164025490bc455de88</sum>
        </package>
        <package name="java-17-openjdk-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">8242ab3958dffa49e80f80c2d2e0ccf35e1455608704c2298d202d7621bdabcf</sum>
        </package>
        <package name="java-17-openjdk-jmods-slowdebug" version="17.0.19.0.10" release="1.el8" epoch="1" arch="s390x" src="java-17-openjdk-17.0.19.0.10-1.el8.src.rpm">
          <filename>java-17-openjdk-jmods-slowdebug-17.0.19.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">9e91428b72cf04b8eb7f24fd375c5c4f9fe9f1a4e8524e88128f064f13aafea8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update from="packager@almalinux.org" status="final" type="security" version="3">
    <id>ALSA-2026:9689</id>
    <title>Important: java-21-openjdk security update</title>
    <issued date="2026-04-23 00:00:00"/>
    <updated date="2026-04-30 07:26:20"/>
    <rights>Copyright 2026 AlmaLinux OS</rights>
    <release>0</release>
    <pushcount>1</pushcount>
    <severity>Important</severity>
    <summary>java-21-openjdk security update</summary>
    <description>The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.  

Security Fix(es):  

  * JDK: Enhance crypto algorithm support (CVE-2026-22007)
  * JDK: Improve Kerberos credentialing (CVE-2026-22013)
  * JDK: Enhance Path Factories Redux (CVE-2026-22016)
  * JDK: Enhance Zip file reading (CVE-2026-22018)
  * JDK: Enhance certificate chain validation (CVE-2026-22021)
  * JDK: Updating FreeType 2.14.1 (CVE-2026-23865)
  * JDK: Enhance TLS connection handling (CVE-2026-34282)
  * JDK: Enhance key generation (CVE-2026-34268)


Bug Fix(es):  

  * When copying files, OpenJDK 21 prefers to use the copy_file_range native function for performance reasons, only falling back to sendfile when this fails. However, in previous OpenJDK 21 releases, a response of EOPNOTSUPP (operation not supported) did not cause the JDK to fall back to sendfile. This is rectified in this release. (AlmaLinux-169617, AlmaLinux-169951, AlmaLinux-169952, AlmaLinux-169942, AlmaLinux-169953, AlmaLinux-169945)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
</description>
    <solution>For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258</solution>
    <references>
      <reference href="https://access.redhat.com/errata/RHSA-2026:9689" id="RHSA-2026:9689" type="rhsa" title="RHSA-2026:9689"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22007" id="CVE-2026-22007" type="cve" title="CVE-2026-22007"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22013" id="CVE-2026-22013" type="cve" title="CVE-2026-22013"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22016" id="CVE-2026-22016" type="cve" title="CVE-2026-22016"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22018" id="CVE-2026-22018" type="cve" title="CVE-2026-22018"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-22021" id="CVE-2026-22021" type="cve" title="CVE-2026-22021"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-23865" id="CVE-2026-23865" type="cve" title="CVE-2026-23865"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34268" id="CVE-2026-34268" type="cve" title="CVE-2026-34268"/>
      <reference href="https://access.redhat.com/security/cve/CVE-2026-34282" id="CVE-2026-34282" type="cve" title="CVE-2026-34282"/>
      <reference href="https://errata.almalinux.org/8/ALSA-2026-9689.html" id="ALSA-2026:9689" type="self" title="ALSA-2026:9689"/>
    </references>
    <pkglist>
      <collection short="almalinux-8-for-s390x-powertools-rpms__8_10_default">
        <name>almalinux-8-for-s390x-powertools-rpms__8_10_default</name>
        <package name="java-21-openjdk-demo-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-demo-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">008b0e5db489bb4b1598610de87d17d8fdf108db1d2c100546884960ec737412</sum>
        </package>
        <package name="java-21-openjdk-headless-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-headless-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">44868ad0063abca496115c163e41a490cb6008945f3653d6aeaf3490fc344e1b</sum>
        </package>
        <package name="java-21-openjdk-static-libs-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-static-libs-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">4c9e00165d381ae67d5e0c9f12fc6ae86b8315781b01da002164133da918a17b</sum>
        </package>
        <package name="java-21-openjdk-devel-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-devel-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">a1f424462d6ddcb20a3c2f56ed8c7603d5cd22e5ba4e804078c9d84d0fdf5b8d</sum>
        </package>
        <package name="java-21-openjdk-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">b6fef4747b70b0625d74a4fccf26e2192ecc6b14a3d2db14adc064fa10c215ea</sum>
        </package>
        <package name="java-21-openjdk-jmods-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-jmods-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">b870ccd4e08eecf8a2aac2695fd4c50f4232e745fbd3d7100859ab479914bfbc</sum>
        </package>
        <package name="java-21-openjdk-src-slowdebug" version="21.0.11.0.10" release="1.el8" epoch="1" arch="s390x" src="java-21-openjdk-21.0.11.0.10-1.el8.src.rpm">
          <filename>java-21-openjdk-src-slowdebug-21.0.11.0.10-1.el8.s390x.rpm</filename>
          <sum type="sha256">ebe7322f75754c77a3ca7af2ed54b35c2ada886c491c4ef9ed3e1f1a03f1c6ec</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>